HTTP Header Checker
View the full HTTP response headers of any URL to audit caching and security.
How it works
Enter a URL to see every response header: content-type, cache-control, security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy), server, compression and redirects. Get clear security warnings where headers are missing.
Worked example
Your site is missing X-Frame-Options, leaving it open to clickjacking. The checker flags the missing header instantly so your developer adds it in the next deploy.
Recommendations
- Enable HSTS, CSP, X-Frame-Options and Referrer-Policy on every page
- Set explicit cache-control directives to control caching behavior
- Audit headers after every deploy or CDN change
Tips & advice
- Compare headers before and after enabling a CDN to catch misconfigurations
- Keep security headers in the platform layer (server, CDN or framework)
- Test the same URL with and without trailing slash — headers should be consistent
.htaccess Generator
Generate a secure and fast Apache .htaccess file with redirects, caching, compression and security headers.
Schema.org Generator
Create valid schema.org JSON-LD markup that helps search engines understand and richly display your content.
FAQ Schema Generator
Turn your questions and answers into valid FAQPage JSON-LD that can earn FAQ rich results in Google.
Article Schema Generator
Add Article, NewsArticle or BlogPosting structured data to help Google understand and display your content better.
HTTP Header Checker
View the full HTTP response headers of any URL to audit caching and security.
Check my site — FreeHTTP Header Checker — step by step
Paste the full URL including the protocol (https://).
Click Check and review every response header returned by the server.
See which security headers are present and which are missing with warnings.
Add missing headers in your server, CDN or framework configuration.
SEO Tools FAQs
HTTP headers are metadata sent by the server with every response, controlling caching, security, content type, compression and more.
HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options and Referrer-Policy are the essential ones.
Add them at the web server, CDN or framework level. On Apache use .htaccess, on Nginx the server block, or middleware in your framework.
HSTS (HTTP Strict Transport Security) tells browsers to always use HTTPS for your domain, preventing downgrade attacks.
More Free Tools
Explore the whole collection — no signup, 100% free & private.