Combat Flip Flops - Bad For Running. Worse For Fighting. SAVE 15% on your next order with coupon code "BFRWFF15"
🔒 No upload - headers are parsed in your browser

HTTP Header Analyzer

Paste the response headers of any website - from curl, DevTools or a server log - and get them parsed, explained and audited: status line, cookie flags, caching and a security score. Nothing is uploaded.

Why paste the headers instead of entering a URL? A browser cannot read another website's response headers — CORS hides all but a few of them, so no pure browser page can fetch them. Copy the header block once and paste it here: parsing, scoring and every explanation run locally on your device. curl -sI https://example.com

What the HTTP Header Analyzer shows you

Response headers tell you how a server delivers a page: the status code, the content type, how long browsers may cache it, which cookies it sets and whether it enforces HTTPS. This analyzer reads a pasted header block, splits every field, explains what it does and groups the result into security, caching, content, cookie and CORS headers. It also scores the response against the headers that matter in practice - HSTS, Content-Security-Policy, X-Content-Type-Options, clickjacking protection, Referrer-Policy and cookie flags - and marks each one as passed, warning or failed with a short reason. Paste the output of curl -sI https://example.com, the response headers from the browser DevTools or a log line from nginx, Apache or Cloudflare. Everything is parsed locally in JavaScript, so internal hostnames and session cookies never leave your device. Browsers cannot read another site's response headers directly, because CORS hides them - which is exactly why this tool works from the copied header block.

More free tools

Free online utility tools. No signup. No tracking.

Impressum · Sitemap · Some links contain affiliate advertising