HTTP Header Checker

Read the response headers a server sends, and see at a glance which common security headers are set.

Just enter a web addressFreeNo sign-up
You came from the Scoped SEO extension. The tool below is ready for the page or image you were checking.
  1. 1Enter the address
  2. 2Run the check
  3. 3Read and fix

How to use it

  1. Enter the address.
  2. Open the headers card and the security table.
  3. Add missing headers in your server or CDN settings.

Your privacy

Our server fetches the page you enter so your browser can analyze it. We do not store the page or the results, and we identify ourselves as ScopedSEOBot.

Spot this in the extension

The Speed tab of Scoped SEO flags this on any page you visit and links straight here to fix it.

Headers worth checking

  • Cache-Control for how long browsers keep files.
  • X-Robots-Tag for noindex rules sent as headers.
  • Security headers such as Strict-Transport-Security and Content-Security-Policy.

Related checks

Follow redirects with the Redirect Checker and see indexing signals with the Indexability Checker.

Common questions

Which headers matter most?

For SEO: status code, content-type, x-robots-tag, cache-control and content-encoding. For security: strict-transport-security and content-security-policy.

Is the page I check stored?

No. Our server makes one request to fetch the page and returns it to your browser. Nothing is saved, and the analysis runs in your browser.