HTTP Status & Header Checker
See the exact status code and response headers a URL returns, follow its redirects, and get a security-header grade with clear fixes.
Checked live from our server — no signup Free, no limits
How to use the HTTP Header Checker
- Enter a URL or domain (https:// is added if you leave it out).
- Optionally switch to a HEAD request, a bot user agent, or turn off redirect following.
- Click Check headers.
- Review the status, security grade, redirect chain, caching headers and the full raw header list.
Frequently asked questions
What are HTTP response headers?
Headers are metadata a server sends before the page itself — the status code, content type, caching rules, cookies and security policies. Browsers and search engines use them to decide how to handle the page.
Which security headers should every site have?
At minimum: Strict-Transport-Security (HSTS), Content-Security-Policy, X-Content-Type-Options: nosniff, X-Frame-Options or CSP frame-ancestors, Referrer-Policy and Permissions-Policy.
What's the difference between GET and HEAD?
A HEAD request asks for the headers only, without the page body. Some servers answer HEAD differently from GET, so GET is the more realistic check.
Why do I get a different result than in my browser?
Servers may vary responses by user agent, location, cookies or bot protection (for example Cloudflare challenges). Try switching the user agent to Chrome.
Do you store the URLs I check?
No. The check is made live from our server and the result is shown only to you.