What is a good security headers score?

A score of 80 or higher means most key security headers are set. HSTS and CSP are the most important because they protect against downgrade attacks and injection.

Why does my score show headers as missing?

The check looks for Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy. If any are not returned by your server, they show as missing.

Why is the final URL different from what I entered?

The tool follows redirects. The final URL is where the server ultimately delivered the response, which may differ from the URL you typed.

Can I check headers for HTTP (non-HTTPS) sites?

Yes. Enter the full http:// URL and the tool will fetch it. If you omit the protocol, https:// is used by default.

sigxlabs/Network Tools

HTTP Headers Checker

Check HTTP response headers for any URL. See security headers and get a quick score.

http headers checker

check response headers

http header lookup

server header checker

URL

How to use

1
Enter a URL
Type any URL like example.com or https://example.com. The https:// prefix is added automatically if missing.
2
Click Check
We fetch the URL and capture every response header returned by the server.
3
Review security headers
See a score based on HSTS, CSP, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
4
Inspect all headers
Scroll the full list to see every header the server returned, including cookies and cache rules.

FAQ

Related tools

SSL Checker

Check the SSL/TLS certificate for any domain. See issuer, validity, and expiry.

OG Preview

Preview how a URL looks when shared on Facebook, Twitter, and LinkedIn. Check Open Graph tags.

DNS Lookup

Query DNS records for any domain. See A, AAAA, MX, TXT, NS, and CNAME records.