🌐 HTTP Headers Checker

Check the HTTP response headers of any URL. Analyze SEO headers (X-Robots-Tag, Content-Type), security headers (HSTS, CSP, X-Frame-Options) and caching headers. Client-side, no server needed.

ℹ️ Note: Due to browser CORS restrictions, this tool uses a public CORS proxy (allorigins.win) to fetch headers. Results are accurate for most public pages. Private or login-protected pages cannot be fetched.

⌨️ Ctrl+Enter to check

🌐 What are HTTP Headers?

HTTP headers are metadata sent by a web server with every response. They control how browsers cache the page, who can embed it, how search engines treat it, and whether security features like HTTPS enforcement and XSS protection are active.

Key SEO Headers

  1. X-Robots-Tag — Server-side equivalent of meta robots (works for non-HTML files like PDFs)
  2. Content-Type — Ensures charset=utf-8 for correct rendering
  3. Location — 301/302 redirect destination
  4. Link rel=canonical — Canonical URL via header (alternative to HTML meta tag)

Key Security Headers

  1. Strict-Transport-Security (HSTS) — Forces HTTPS
  2. Content-Security-Policy (CSP) — Prevents XSS attacks
  3. X-Frame-Options — Prevents clickjacking
  4. X-Content-Type-Options — Prevents MIME sniffing

🌐 Hindi Guide / हिंदी गाइड

HTTP Headers वह metadata है जो web server हर response के साथ भेजता है। ये browser को बताते हैं कि page कैसे cache करें, search engine को कैसे treat करें, और security features कौन से enable हैं।

Important SEO Headers

  1. X-Robots-Tag: Server-side robots directives (PDFs के लिए useful)
  2. Content-Type: charset=UTF-8 होना ज़रूरी
  3. Location: Redirect का destination
  4. Cache-Control: Caching policy

Security Headers

  1. HSTS: HTTPS enforce करता है
  2. X-Frame-Options: DENY — Clickjacking से बचाव
  3. X-Content-Type-Options: nosniff — MIME attack से बचाव
  4. Referrer-Policy: Referrer information control