Website Tools

HTTP Headers Checker

See every HTTP response header a website sends back to browsers.

Not sure what to enter? Try an example: github.com

Free & instant No signup How to use FAQ

Enter a URL to see the full list of response headers - server software, caching rules, security headers, cookies and more.

What are HTTP response headers?

HTTP response headers are the name-value lines a server sends before the page content. They describe the response (Content-Type, Content-Length), control caching (Cache-Control, ETag), identify the server and set security policies (Strict-Transport-Security, Content-Security-Policy). This tool lists every header a URL returns.

How to view a website's HTTP headers

Enter the domain or URL in the box above.
Click Check Headers.
Review caching headers (Cache-Control, Expires) and security headers (HSTS, CSP, X-Frame-Options).
Remove headers that reveal unnecessary detail, such as exact server or framework versions.

Related checks

For a scored review of security headers, use the Security Headers Checker.
To focus on caching, use the Cache Headers Checker.

JustChecker monitors your websites around the clock and alerts you the instant something changes.

Frequently Asked Questions

A CDN or cache may still be serving an older response, the rule may apply only to some file types, or another layer may strip it. Purge the cache and check that the rule matches the page you tested.

Hiding the exact version (for example nginx/1.18.0) is a sensible precaution, because it tells attackers which known bugs to try. Use server_tokens off in Nginx or ServerTokens Prod in Apache.

Cache-Control, ETag or Last-Modified, and Content-Encoding. The Cache Headers Checker and GZIP Compression Checker look at those in more detail.

Share this tool:

Need a website for your business? Only $599