Free HTTP Header Checker

Enter any URL to view its full HTTP response headers and a scorecard of the security headers that matter for SEO and safety — HSTS, CSP, X-Frame-Options, and more.

Example resultA sample report for example.com — run the tool on your own URL above for live results.
Status
200 OK
Server
nginx
HSTS
Present
Content-Security-Policy
Missing
X-Frame-Options
SAMEORIGIN
Security score
4 / 6 headers
Raw response headers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=3600, public

Why HTTP headers matter for SEO

Response headers control caching, security, and how content is served. Missing security headers (like HSTS or a Content-Security-Policy) won’t directly tank rankings, but HTTPS and a secure setup are trust signals — and headers like X-Robots-Tag and Cache-Control directly affect crawling and indexing.

Key security headers to set

  • Strict-Transport-Security (HSTS) — forces HTTPS.
  • Content-Security-Policy — mitigates XSS.
  • X-Content-Type-Options: nosniff and X-Frame-Options.

Frequently asked questions

Is the HTTP header checker free to use?

Yes, it is completely free. Enter any public URL to instantly see its full HTTP response headers along with a security-header scorecard.

What security headers should my website have?

The most important are Strict-Transport-Security (HSTS), Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy. Together they help protect against attacks like clickjacking, MIME-type sniffing, and protocol downgrade.

How do I add missing security headers to my site?

Add them in your web server or application config — the Header directive in Apache, add_header in Nginx, or response middleware in your app. After deploying, recheck the URL to confirm the headers now appear in the response.

Related free tools

Instant SEO Snapshot

One-click SEO & AI-readiness grade for any page — HTTPS, indexability, title, meta, headings, content & more. Embeddable on your own site.

AI Bot Access Checker

Can ChatGPT, Perplexity, Claude & Gemini crawl your site? Checks robots.txt + live CDN/WAF blocks.

AI Visibility Checker

See what ChatGPT, Claude & Perplexity know about your brand — and how to improve it.

NLP Content Analyzer

Topics, entities, search intent & content gaps an NLP model sees in your page.

AI Retrieval Checker

AI/AIO readiness — can ChatGPT, Perplexity & AI Overviews find, chunk & cite your page?

AI Crawler Log Analyzer

Upload your access log to see which AI bots (GPTBot, ClaudeBot, PerplexityBot) actually crawled you — with spoofed-vs-verified detection.

Want the full picture?

This tool checks one thing. Run a complete, free SEO audit across 26 factors in about a minute.

Run a free SEO audit