HTTP Response Headers

Inspect the HTTP response headers returned by any URL. Check cache-control, security headers (HSTS, CSP, X-Frame-Options), content-type, server software, and more.

HTTP Response Headers
Enter a URL above to inspect its HTTP response headers.

Common HTTP Response Headers

  • content-type — MIME type of the response body
  • cache-control — caching policy for the response
  • strict-transport-security — enforces HTTPS (HSTS)
  • x-frame-options — controls if page can be embedded in iframes
  • content-security-policy — defines allowed content sources
  • server — identifies the web server software