HTTP Headers

Inspect HTTP response headers: HSTS, CSP, X-Frame-Options, and more. Free security header analyzer.

About this HTTP Headers tool

CheckHub fetches a URL and lists every response header, flagging missing security headers like HSTS, CSP, X-Content-Type-Options, and Referrer-Policy.

How to use the HTTP Headers

  1. Step 1. Enter a URL.
  2. Step 2. Read the header list and the security score for missing protections.

Frequently asked questions

Which security headers matter most?
HSTS, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy give the biggest defense-in-depth wins.

Related Network Tools