HTTP header checker that lets you check HTTP headers for any URL. Inspect security, caching, encoding, and performance headers.

See status, cache, compression, and security headers in one view.
Verify max-age, public/private, and x-cache / cf-cache-status from your edge.
Spot missing HSTS, Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options.
Confirm compression is being applied to text responses.
No. We make a single read-only header request and discard the result after rendering.
Some servers omit security headers by default, and some CDNs strip them. Missing usually means 'not configured', not 'hidden'.
max-age=31536000, immutable for hashed/versioned assets. Short or no-cache for HTML.
Some servers block cross-origin header reads or rate-limit unfamiliar clients. Try again or test with curl.
Overlapping — this returns every header; the Cache Checker focuses on cache-related ones with extra diagnosis.
Want your whole site this fast? Our team offers full website speed optimization — done for you .