How to Use the HTTP Headers Checker
- Enter a full URL (e.g.
https://example.com). - Choose HEAD (faster) or GET (follows redirects more reliably).
- Click Check Headers to inspect the response.
Security Headers Explained
- Strict-Transport-Security — forces HTTPS for all future requests
- Content-Security-Policy — prevents XSS and injection by whitelisting allowed sources
- X-Content-Type-Options — prevents MIME-type sniffing
- X-Frame-Options — prevents clickjacking by disabling iframe embedding
- Referrer-Policy — controls how much referrer info is sent with links
- Permissions-Policy — controls which browser features (camera, mic, etc.) can be used
API Integration
Send a POST request to /api/headers with url, optional method (HEAD/GET), and follow_redirects. The response includes all headers, redirect chain, TLS info, security header analysis with a score, and timing data. Rate limited to 30 requests per minute.
Privacy: Only the URL you enter is sent to the server. No data is stored.
More Free Online Tools
Explore 38 fast, private tools at Wivrix — 32 browser-based and 6 API tools.