HTTP HEADERS
Inspect HTTP response headers for any URL. Check security headers, redirects, CORS config, and Content-Security-Policy values.
URL
QUICK EXAMPLES
ABOUT HTTP HEADERS
Why Inspect HTTP Headers?
HTTP response headers control how browsers and clients interact with your server. Security headers protect against XSS, clickjacking, MIME sniffing, and other attacks. Inspecting headers helps debug CORS issues, verify caching, and audit security posture.
Key Security Headers
- Strict-Transport-Security — enforce HTTPS connections
- Content-Security-Policy — prevent XSS and injection attacks
- X-Frame-Options — prevent clickjacking
- X-Content-Type-Options — prevent MIME sniffing
- Referrer-Policy — control referrer information leakage