tools ▸ http headers

What is yourserver saying?

Fetch any URL and follow every redirect hop. See status codes, timings, caching and server headers — and which security headers are missing.

running from our India servers…

http headers ▸ explained

What you need
to know.

Fetch a URL and inspect status code, redirect chain, response and security headers.

301 / 302

Each extra hop slows the page and leaks link equity. Aim for one 301 from http/www to your canonical URL.

HSTS / CSP

Strict-Transport-Security, Content-Security-Policy, X-Frame-Options and friends harden your site against common attacks.

cache

Cache-Control and ETag decide how browsers and CDNs cache your pages and assets.

related ▸ more free tools

faq ▸ before you buy

What are HTTP headers?+

HTTP headers are metadata a server sends with every response — status code, content type, caching rules, cookies and security policies.

How do I check a redirect chain?+

Enter the starting URL (for example http://yourdomain.com). The checker follows up to 6 redirects and lists each hop with its status code.

Which security headers should every site have?+

Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options (or CSP frame-ancestors), Referrer-Policy and a Content-Security-Policy.

~$ provision --region in ✓ done in 47s