HTTP Headers Checker
HTTP headers checker — redirect chain, security header grade, robots.txt, and sitemap preview.
About this tool
Fetch the HTTPS response for a public domain and review how the server answers — redirect hops, security headers, cache directives, and crawl rules. Useful for SEO migrations, hardening reviews, and debugging canonical URL issues.
What you get
- Redirect chain from the hostname you entered to the final URL
- Security header grade (HSTS, CSP, X-Frame-Options, Referrer-Policy, and more)
- Full response headers as collapsible JSON
- robots.txt preview and declared sitemap reachability
How to use
Enter a domain and fetch headers. Only check hosts you are allowed to probe.
Security headers snapshot
A well-hardened HTTPS response might include:
| Header | Value |
|---|---|
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| Content-Security-Policy | default-src 'self' |
| X-Frame-Options | DENY |
| Referrer-Policy | strict-origin-when-cross-origin |
Redirect chains, robots.txt, and sitemap discovery are included in the live report.
Glossary
- HSTS
- HTTP Strict Transport Security — forces browsers to use HTTPS for the host.
- CSP
- Content Security Policy — restricts script, style, and resource origins.
- X-Frame-Options
- Controls whether the page may be embedded in frames (clickjacking mitigation).
FAQ
How to check HTTP response headers online?
Enter a URL to fetch the response and review status, redirect chain, and headers in a structured view with optional raw JSON.
How to check security headers on a website?
The grade covers HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and related headers with pass or missing flags.
How to see HTTP redirect chain for a URL?
Each hop shows status code and Location so you can debug www/non-www, HTTP→HTTPS, and trailing-slash loops.
How to check HSTS and CSP headers?
Strict-Transport-Security and Content-Security-Policy values are parsed and graded—missing or weak policies are called out explicitly.
Does the tool fetch robots.txt and sitemap?
Yes—robots.txt and sitemap references for the host are retrieved so you can confirm crawl rules and index discovery paths.
Why are HTTP headers important for SEO and security?
Redirects affect canonical URLs; security headers reduce XSS and clickjacking risk; cache and robots headers influence crawling and performance.
By using this tool you agree to our Terms of Use and Privacy Policy. Results are provided as-is without warranty.