Deploy Now
Radar Tools

HTTP Headers

Audit headers for security and performance.

Inspect HTTP response headers from any URL. Audit security headers like HSTS, CSP, and X-Frame-Options to ensure your VPS or web application follows best practices.

HTTP Header Inspection

/tools/http-headers

How It Works

Our server sends an HTTP HEAD request to the target URL using cURL, follows redirects, and collects all response headers. We then analyse whether key security headers are present or missing and present a summary.

Frequently Asked Questions

We check for Strict-Transport-Security (HSTS), Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy.
Missing headers means the server is not sending them. Add them in your web server configuration (Nginx/Apache) or application middleware for better security.
Yes, it follows up to 5 redirects and shows the headers from the final response.