Free HTTP Header Checker

Enter any URL to view its full HTTP response headers and a scorecard of the security headers that matter for SEO and safety — HSTS, CSP, X-Frame-Options, and more.

Example resultA sample report for example.com — run the tool on your own URL above for live results.
Status
200 OK
Server
nginx
HSTS
Present
Content-Security-Policy
Missing
X-Frame-Options
SAMEORIGIN
Security score
4 / 6 headers
Raw response headers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=3600, public

Why HTTP headers matter for SEO

Response headers control caching, security, and how content is served. Missing security headers (like HSTS or a Content-Security-Policy) won’t directly tank rankings, but HTTPS and a secure setup are trust signals — and headers like X-Robots-Tag and Cache-Control directly affect crawling and indexing.

Key security headers to set

  • Strict-Transport-Security (HSTS) — forces HTTPS.
  • Content-Security-Policy — mitigates XSS.
  • X-Content-Type-Options: nosniff and X-Frame-Options.

Frequently asked questions

Is the HTTP header checker free to use?

Yes, it is completely free. Enter any public URL to instantly see its full HTTP response headers along with a security-header scorecard.

What security headers should my website have?

The most important are Strict-Transport-Security (HSTS), Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy. Together they help protect against attacks like clickjacking, MIME-type sniffing, and protocol downgrade.

How do I add missing security headers to my site?

Add them in your web server or application config — the Header directive in Apache, add_header in Nginx, or response middleware in your app. After deploying, recheck the URL to confirm the headers now appear in the response.

Related free tools

Instant SEO Snapshot

One-click SEO & AI-readiness grade for any page — HTTPS, indexability, title, meta, headings, content & more. Embeddable on your own site.

AI Bot Access Checker

What does your robots.txt say to OAI-SearchBot, PerplexityBot, Claude-SearchBot, GPTBot and the rest? Read with the real rules.

AI Model Recall Checker

Ask free AI models the unbranded questions your buyers type, and count how many name your brand unprompted — with each model and its training cutoff shown. It measures what those models remember from training, not a live check of ChatGPT, Claude or Perplexity; a built-in panel lets you spot-check the real engines by hand.

NLP Content Analyzer

Topics, entities, search intent & content gaps an NLP model sees in your page.

AI Retrieval Checker

AI-retrieval readiness for one page — an AI model’s read of how findable and quotable it is, with fixes.

AI Crawler Log Analyzer

Upload your access log to see which AI bots (GPTBot, ClaudeBot, PerplexityBot) actually crawled you — with IP verification where the operator publishes ranges. Runs in your browser.

Want the full picture?

This tool checks one thing. Run a complete, free SEO audit across 28 modules.

Run a free SEO audit