Bulk up to 100 • Key security/SEO headers

Response Header Checker

Paste URLs or domains — we’ll fetch the final response and show important headers like Content-Type, Cache-Control, HSTS, CSP, and X-Robots-Tag.

Paste up to 100 URLs/domains (one per line)
Tip: paste http:// to test HTTP directly. If no scheme is provided, we default to https://.

Results

URL Status Key headers (final) Time Issues
Run a check to see results here.
Click “Show all headers” inside a row to expand the full final header set.

What you can audit with headers

Headers affect caching, security, and indexing behavior. This tool highlights common ones worth checking.

  • OK 2xx/3xx with clean final response
  • Warning missing HSTS (for HTTPS), unusual caching, blocking headers
  • Error 4xx/5xx, timeouts, loops, DNS/TLS failures
HTTP header audit

Response Header Checker: verify SEO + security signals fast

This tool fetches the final HTTP response for each URL and prints the most useful headers at a glance. It helps you quickly spot indexing blocks, weak caching, misconfigured security policies, and redirect behavior.

How it works

For every input, we request the URL, follow redirects (up to a safe limit), and capture the final response status, final URL, hop count, timing, and the final response headers. Some servers do not allow HEAD, so we fallback to a tiny GET to still retrieve headers.

Headers worth watching

  • X-Robots-Tag: can block indexing at the HTTP layer.
  • Cache-Control: controls caching/CDN behavior and performance.
  • Content-Type: confirms the correct MIME type (HTML/JSON/etc.).
  • Strict-Transport-Security (HSTS): important security signal for HTTPS sites.
  • Content-Security-Policy: hardens the site against injection attacks.

When to use it

Run it after migrations, CDN changes, HTTPS enforcement, WAF tweaks, or sudden indexing/ranking drops. If Google behaves “weird”, headers are often the quickest place to catch the real reason.

FAQ

What does this tool check?

It fetches the final HTTP response for each input URL (after redirects) and shows the most important response headers, plus status code, final URL, hop count, and timing.

Does it follow redirects?

Yes. The checker follows redirects step-by-step up to a safe limit, then reports the final URL and the final header set. If a redirect loop is detected, the tool marks it as a loop.

Why do some sites show different headers than in my browser?

CDNs and WAFs may vary headers by region, cache state, cookies, or user-agent. Also, some headers only appear on specific routes. This tool uses a consistent request method and shows what the server returned for that request.

What does status “0” mean?

Status 0 means there was no valid HTTP response. Common causes include DNS failure, TLS handshake error, firewall/CDN blocking, or request timeout.

Why does it warn about “No HSTS”?

If the final URL is https:// and Strict-Transport-Security is missing, the tool flags it. HSTS is a common security baseline for HTTPS sites (usually enabled at the origin or CDN).

What headers are most useful for SEO?

Look at X-Robots-Tag (can block indexing), Content-Type (wrong MIME can break rendering), caching headers (performance), and redirect behavior (extra hops reduce efficiency).

Does the tool show all headers?

Yes. Each row includes an expandable “Show all headers” section that prints the complete final header set captured from the last response.

Why can HEAD and GET show different headers?

Some servers treat HEAD differently or block it. This tool uses HEAD first and falls back to a tiny GET when needed, so it can still capture headers from servers that don’t support HEAD properly.