HTTP Header Checker (Browser-Limited)
Enter a website address to see the response headers your browser can actually read. This helps developers check content type, caching hints, and security headers that a site chooses to expose to browsers.
Honest limits: Most servers only expose a small set of safe headers to cross-origin browser pages. Security headers such as strict-transport-security are often hidden by CORS even when the server sends them. An absent header here does not prove the server does not send it; it proves only that your browser could not read it.
Headers will appear here.
How to use
- Enter the full website address.
- Press Check headers.
- Read the status and the headers your browser could expose.
- For the full header list, use a server-side tool or curl, as explained on the page.
Frequently asked questions
Why are so few headers shown?
Browsers only expose headers a server allows for cross-origin reads. Many useful headers stay hidden even though the server sends them.
Does a missing security header mean the site is unsafe?
Not from this check alone. The header may be present but hidden by CORS. Verify with curl or a server-side checker before judging.
What is CORS?
Cross-Origin Resource Sharing is a browser security rule that controls which sites a web page may read data from. It protects users, but it limits browser-based checkers.
Can I check headers for my own site?
Yes, and for a complete list, check from your own server or hosting panel, where CORS does not hide headers.
Related tools
- Website Status Checker — Check whether a website responds, with honest browser limits.
- DNS Lookup Tool — Look up A, AAAA, MX, TXT, and NS records via public DNS.
- IP Address Lookup Tool — Find location and network details for an IP address.
- SSL Certificate Checker (Browser-Limited) — Understand what a browser can and cannot check about HTTPS.
- Domain Information Lookup (RDAP + DNS) — Check domain registration and DNS details from public sources.
- Favicon Generator Online — Create a favicon from an image or initials, in your browser.