HTTP Headers Inspector
Fetch the response headers of a URL — status, content type, caching and security headers — with explanations of what is missing.
Inspect
Warnings
No check run yet
Response headers
—
About security headers
- Strict-Transport-Security — forces browsers to use HTTPS.
- Content-Security-Policy — limits which scripts and resources the page may load.
- X-Content-Type-Options: nosniff — blocks MIME-type sniffing.
- X-Frame-Options — controls whether the page may be embedded in frames.
- Referrer-Policy — limits how much referrer information is sent.
- Permissions-Policy — restricts browser features such as camera and geolocation.
Redirects are not followed: the status and headers of the first response are shown as-is.