HTTP Header Analyzer

Paste HTTP response headers to check security headers, caching and cookies, with fix recommendations.

Runs in your browser. Your input is processed on your device and is not uploaded to our server.

Response headers

HTTP/2 200
content-type: text/html; charset=UTF-8
cache-control: public, max-age=600
server: Apache/2.4.58 (Unix) PHP/8.3.2
x-powered-by: PHP/8.3.2
set-cookie: session=abc123; Path=/; HttpOnly
x-content-type-options: nosniff

–Security headers present

–Warnings

–Headers parsed

All parsed headers

How to use the HTTP Header Analyzer

Copy the response headers from your browser’s developer tools (Network tab) or from curl -I.
Paste them into the box.
Review the security, caching and cookie findings.

The analyzer checks for Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options or frame-ancestors, Referrer-Policy and Permissions-Policy, reviews Cache-Control and cookie flags (Secure, HttpOnly, SameSite), and flags headers that reveal server versions. It analyses what you paste, in your browser; to fetch headers from a live URL use the HTTP Status Checker.

Frequently asked questions

How do I copy headers from Chrome?

Open DevTools (F12), go to Network, click the request, open the Headers tab, and copy the Response Headers section with “View source”.