HTTP headers and redirects
View the headers of a website, follow redirects step by step, and check the security headers.
Every web page is delivered with headers: lines that the server sends along, such as the file type, cache settings and security. This tool also follows redirects step by step, so you can see where a link really ends up, for example from http to https.
The security headers help browsers handle your site securely: Strict-Transport-Security enforces https, Content-Security-Policy restricts where scripts may come from, X-Content-Type-Options prevents a browser from guessing file types and Referrer-Policy determines what data is sent along with a click. Their absence is not an error, but they are recommended.
We only check public websites on ports 80 and 443, and for cookies we only show the name and settings, never the content. Nothing is stored.