Security•Runs on Request
HTTP Header Checker
Lookup and audit standard HTTP request and response security headers (HSTS, CSP, X-Frame-Options).
Developer workbench
⌘ / Ctrl + Enter to runConfigure. Run. Inspect.
Requests run only when you click Run. Browser CORS restrictions apply; remote responses are never simulated.
19 input bytes
Output
How to Use HTTP Header Checker
01
Search for any HTTP header (e.g. Content-Security-Policy).
02
Read syntax definitions, recommended secure values, and security implications.
03
Copy production-ready header snippets.
Frequently Asked Questions
What does X-Frame-Options do?
It protects against clickjacking by preventing other domains from embedding your site inside an iframe.
Related Developer Tools
Explore more free client-side developer utilities in this category