HTTP Headers Checker
See any URL's HTTP response headers, status code, redirect chain and security headers (HSTS, CSP, X-Frame-Options and more). Fast, free and nothing is stored.
About HTTP response headers
Every time a browser requests a page, the server replies with a status code and a set of response headers — metadata describing the content type, caching, cookies, compression, the server software and the site's security policy. Reading them is the quickest way to debug redirects, caching and CORS, confirm a deployment, or audit whether a site sends hardening headers like HSTS and Content-Security-Policy. This checker fetches only the headers, so it is fast.
More PAYATE tools
Frequently asked questions
What does the HTTP Headers Checker do?
It requests a URL and shows the HTTP status code, the full response headers the server sends, the redirect chain (if the URL forwards elsewhere) and a quick security-header checklist — all without you installing anything.
Which security headers do you check?
HSTS (Strict-Transport-Security), Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Missing ones are flagged so you can harden the site.
Why was my URL blocked?
For safety the tool only fetches public http/https URLs. Private, local, loopback and reserved addresses (and non-web schemes or unusual ports) are refused to prevent server-side request abuse.
Does it load the whole page?
No — it asks only for the headers (a HEAD request, or a single-byte GET if HEAD is refused), so it is fast and does not download the page body.
Do you store the URLs I check?
No, nothing is stored by this tool. For a certificate check use the SSL Checker, for DNS the DNS Lookup and for status-code meanings the HTTP Status Codes reference.