HTTP Header Checker
Analyze HTTP response headers and inspect security or performance configurations.
HTTP Headers Guide
Security Headers
Essential headers to enhance your site security and protect visitors from common attacks.
Strict-Transport-Security
HSTS forces browsers to communicate with your site using HTTPS only instead of HTTP, protecting users from man-in-the-middle attacks.
Content-Security-Policy
CSP helps prevent XSS injection attacks by specifying trusted sources from which the browser can load resources (such as scripts, styles, and images).
X-Frame-Options
Protects your site from Clickjacking attacks by preventing your pages from being embedded within <iframe> or <frame> on other sites.
X-Content-Type-Options
Prevents the browser from incorrectly guessing the MIME type. When set to "nosniff", the browser strictly follows the Content-Type header value.
Referrer-Policy
Controls how much referrer information is sent when clicking a link. Proper configuration helps protect user privacy.
Permissions-Policy
Allows your site to specify which browser features and APIs can be used, such as camera, microphone, or geolocation access.
Performance Headers
Headers that help browsers and servers improve page load speed and deliver a better user experience.
Content-Encoding
Tells the browser the compression algorithm used on the content (e.g., gzip or brotli). Compressing responses reduces data size and speeds up page loading.
Cache-Control
Determines how the response is cached by browsers and proxies. Effective use reduces server requests and improves site performance for returning visitors.
Vary
Informs caching servers that the response may vary based on certain request headers (such as User-Agent or Accept-Encoding). This ensures the correct cached version is served.
Common & Custom Headers
Explanation of general or platform-specific headers (such as Cloudflare) that frequently appear in web responses.
Date
Contains the date and time when the message (response) was generated. This helps in caching operations and tracking response age.
Content-Type
Specifies the media type (MIME type) of the sent content, such as "text/html" or "application/json". This tells the browser how to process and display the data.
Transfer-Encoding
Specifies the encoding format used to safely transfer content to the user. The value "chunked" means data is sent in a series of chunks.
Connection
Controls whether the network connection stays open after the current transaction finishes. "keep-alive" allows reusing the same connection for multiple requests, improving performance.
Server
Contains information about the software used by the origin server to handle the request. This information is often hidden or modified for security reasons.
X-XSS-Protection
(Deprecated header) Was used to enable XSS protection in older browsers. No longer recommended; rely on Content-Security-Policy (CSP) instead.
NEL
Used with the "Report-To" header to enable Network Error Logging, allowing sites to collect reports about client-side connection failures.
Report-To
Specifies an endpoint where the browser can send error reports and warnings, such as CSP violations or SSL certificate issues.
CF-Cache-Status
(Cloudflare-specific) Indicates whether the request was served from Cloudflare cache. Common values: DYNAMIC, HIT, MISS.
CF-RAY
(Cloudflare-specific) A unique ID assigned to each request passing through Cloudflare network. Useful for tracing requests or reporting issues to Cloudflare support.
alt-svc
The "Alternative-Service" header tells the browser about alternative ways to reach the same site, such as using HTTP/3 for improved performance.
Overall Rating
What is your rating? Your feedback helps us improve and develop our services continuously.
Popular Tools
Age Difference Calculator
Calculate the age difference between two people. Find who is older and the exact time difference in years, months, and days.
Percentage Calculator
Calculate percentage change, increase, and decrease easily between two values. Free and fast tool with step-by-step solutions and formulas.
PDF Converter
Convert files to and from PDF easily. Supports converting Word, Excel, PowerPoint, and images to PDF and vice versa. Free and secure converter.
Latest Updates
Added Color Extractor Tool
A new tool that allows you to extract colors from any supported image.
Improved Age Calculator Speed
Fixed the delay issue when calculating very old dates.