Header Checker
HTTP Headers Checker Tool
Common HTTP Headers Explained
📤 Response Headers
Content-Type: MIME type of content
Server: Web server software
Cache-Control: Caching directives
Content-Encoding: Compression method
>Last-Modified: Last update date
🔒 Security Headers
Strict-Transport-Security: Force HTTPS
X-Frame-Options: Prevent clickjacking
X-Content-Type-Options: MIME type security
Content-Security-Policy: XSS protection
X-XSS-Protection: Cross-site scripting filter
🔢 HTTP Status Codes
200: OK - Success
301: Moved Permanently
302: Found (Temporary Redirect)
404: Not Found
500: Internal Server Error
Security Headers Best Practices
Forces browsers to use HTTPS. Example: max-age=31536000; includeSubDomains
Prevents clickjacking attacks. Use: DENY or SAMEORIGIN
Controls resources the browser can load. Prevents XSS attacks.
Prevents MIME type sniffing. Always use: nosniff
Performance-Related Headers
Controls how long browsers cache resources
max-age=3600, public
Compression method used (gzip, br)
gzip
Resource version identifier for caching
"33a64df551425fcc55e"
When the resource should be considered stale
Wed, 21 Oct 2026 07:28:00 GMT
Why Check HTTP Headers?
- Security Audit: Verify security headers are properly configured
- Performance Optimization: Check caching and compression settings
- Redirect Chains: Identify unnecessary redirects slowing down your site
- Server Information: See what technology powers your website
- SEO: Ensure proper status codes and canonical headers
- Debugging: Troubleshoot issues with page loading or security