Skip to content

HTTP Header Checker

See exactly what headers a URL returns, with the security-relevant ones called out: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and more.

All network diagnostics tools

Related free tools

Word Counter
Count words, chars, reading time.
JSON Schema Validator
Validate JSON against Draft 2020-12 schemas.
Secure Key Generator
API keys, JWT secrets, UUIDs, AES, Django keys.
Hash Generator
Binary-safe MD5 and SHA file or text checksums.
HMAC Generator & Verifier
Generate and verify HMAC signatures locally.
UUID Generator
Generate and validate UUID v4 and time-ordered v7.

What this tool does

Inspect HTTP response headers from a public URL.

How to use it

Enter an HTTP(S) URL and review the response status and returned headers.

Worked example

A response with Content-Type: text/html declares HTML; a missing header appears as absent rather than a fabricated value.

Limitations and checks

Responses may differ by method, location or user agent. A missing security header needs context and does not by itself establish exploitability.

How your data is processed

The lookup sends the domain, IP or URL to a SimpleTaskTools API and the external service needed for the lookup. Results reflect that service’s network vantage point. Do not submit private URLs, credentials or tokens.

Privacy and storage details · Report an incorrect result · Browse tools