HTTP Header Check
Analyze the HTTP headers of a website – security headers, caching and server information.
How the HTTP Header Check Works
Our HTTP header check fetches the publicly accessible HTTP response headers of the entered URL and evaluates them according to security criteria. The rating is based on the presence of important security headers such as HSTS, CSP, X-Frame-Options and others. The result shows you at a glance which headers are missing and how to improve your web server configuration.
Frequently Asked Questions about HTTP Header Check
What are HTTP headers?
HTTP headers are metadata exchanged with every request between browser and server. They contain information about content type, caching rules, security policies and server details. Security headers like HSTS, CSP and X-Frame-Options protect against common attacks.
Which security headers are important?
The most important ones are: Strict-Transport-Security (HSTS) enforces HTTPS, Content-Security-Policy (CSP) prevents XSS attacks, X-Frame-Options protects against clickjacking, X-Content-Type-Options prevents MIME sniffing, and Referrer-Policy controls which information is passed to other websites.
How do I improve my security rating?
Add missing security headers to your web server configuration (Apache .htaccess or Nginx). Start with HSTS and X-Content-Type-Options as these are the easiest to implement. Test again with our tool after each change.