← All Docs

HTTP Header Analyzer

Fetch any URL and evaluate its response headers. Grades security headers (HSTS, CSP, X-Frame-Options) with pass/fail analysis.

Try HTTP Header Analyzer →

What It Does

The HTTP Header Analyzer fetches a URL and displays all response headers. It evaluates 7 security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection) and assigns a letter grade (A through F) based on which headers are present and properly configured.

How to Use It

  1. Navigate to Diagnostics → HTTP Headers from the top menu.
  2. Enter a URL or domain (e.g., example.com).
  3. Click Analyze or press Enter.
  4. View the security grade (A-F) and pass/fail evaluation for each security header.
  5. Scroll down to see all response headers in a table.
  6. Use Copy All or Download .txt to export.

Use Cases

  • Security audit: Check if a site has proper security headers configured.
  • Compliance: Verify headers meet organizational security policies.
  • Debugging: Inspect response headers for caching, CORS, or redirect issues.
  • Competitive analysis: Compare security posture across sites.