A
AiTechWorlds
AiTechWorlds
Inspect a URL’s response headers and grade its security headers (HSTS, CSP, X-Frame-Options, and more).
Headers are fetched via the free codetabs proxy because browsers can't read cross-origin headers directly.
The HTTP Headers Analyzer fetches a URL's HTTP response headers and grades its security posture. It shows every response header and checks for the key security headers — Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy — telling you how many are present. It is free and needs no signup.
Enter a URL
Type the full URL (https://example.com) you want to inspect.
Analyze
Click Analyze to fetch the response headers via a proxy.
Check security headers
See which of the six key security headers are present or missing.
Browse all headers
Review the complete list of response headers and their values.
100% Private — No Server Required
All processing happens directly in your browser. No data is uploaded, stored, or transmitted to any server.
Last reviewed on June 14, 2026 by the AiTechWorlds Tools Team. All processing runs locally in your browser.