Fetched server-side through our proxy, so it works on any public URL. Redirects are followed automatically.
Frequently asked questions
Why can the browser not fetch headers directly?
Browsers block JavaScript from reading other sites responses for security (CORS). That is why the Fetch mode goes through a small server-side proxy, and why Paste mode exists as a fallback that always works.
Which security headers matter most?
Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy. This tool flags any of the five that are missing so you can ask your developer to add them.
Where do I copy raw headers from?
Open the page in Chrome, press F12, go to the Network tab, reload, click the page request, and copy the Response Headers section. Paste the whole block starting with the HTTP status line.
Preview
Related free tools
Free HTML Anchor Link Generator | Build <a> Tags
Free HTML anchor link generator. Build correct link tags with target, rel, and title attri
Free Canonical Tag Generator | SEO Canonical URLs
Free canonical tag generator. Enter your preferred page URL and generate a correct canonic
Free Hreflang Tag Generator for Multilingual Sites
Free hreflang tag generator. Enter each language version URL and generate correct hreflang