FREE TOOL

HTTP Header Checker.

See what a web server sends back for any address: the status code, every redirect on the way, the security headers, caching and compression, and how fast it answers.

100% free, no sign-up. To stop automated scanning, each browser can run up to 10 scans per tool every 3 hours; only that count is kept (privacy).

Try:
WHAT ARE HTTP HEADERS

What Is an HTTP Header Checker?

Every time a browser asks for a page, the server answers with the page and a set of HTTP headers: short lines that say how the answer should be handled. An HTTP header checker shows those lines for any address, together with the status code and every redirect on the way.

Headers tell you if the page was found (200) or moved (301 or 302), how long it may be cached, whether it was compressed, which software answered and which protections the site asks the browser to apply, such as HSTS and Content-Security-Policy.

This tool makes the request from our server, not your browser, so extensions, cookies, caches and logins do not change what you see. It follows up to six redirects and shows the time to first byte.

WHAT YOU WILL SEE

What the Server Really Sends.

The request is made from our server, not your browser, so you see the plain answer without extensions, caches or logins in the way.

Status and redirects

The HTTP status code and each redirect, such as http to https or example.com to www, with the address and time of every step.

Security headers

Whether HSTS, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy are set.

Speed and caching

Time to first byte, connect and TLS time, the cache rules and whether the response is compressed.

Server details

The server software and content type, plus every response header, for debugging.

TROUBLESHOOTING

Common Problems and Fixes.

Headers explain most "why is my site slow or redirecting oddly" questions.

The page redirects in a loop

Two rules send visitors back and forth, often HTTP to HTTPS or www to non-www set in two places. Keep each redirect in one place, such as the server config, and test again.

There are too many redirects

Every hop adds delay and may lose search value. Link to the final address and redirect the old address straight to it in one step.

Security headers are missing

Add Strict-Transport-Security, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, a frame rule and a Content-Security-Policy in the server config or .htaccess.

The time to first byte is slow

A high value points to slow server work, usually uncached PHP or database queries. Add page caching, use a CDN or move to a faster server.

Compression is off

Turn on gzip or Brotli for text files. A compressed answer carries a Content-Encoding header and is much smaller to send.

Cache headers are wrong or missing

Static files such as images and fonts should carry Cache-Control with a long max-age. Pages that change often should not be cached for long.

GOT QUESTIONS?

Frequently Asked Questions

Quick answers about this tool.

It is the server's short answer: 200 means OK, 301 and 302 are redirects, 404 means not found, and 500 and above mean a server error. The tool shows the code for every step of a redirect chain.

Each redirect adds waiting time and can confuse search engines. Ideally http goes to https in one step and the non-www name goes to the www name (or the other way round) in the same step, ending on the final address.

At least HSTS (always use HTTPS), X-Content-Type-Options, a Referrer-Policy and a frame rule. A Content-Security-Policy and a Permissions-Policy add more protection. The tool counts how many of the six main headers are present.

Under about 600 milliseconds from a distant location is good, and under 200 ms is excellent. A slow first byte usually points to a busy or distant server, or an unoptimised application.

Browsers use caches, cookies and extensions, and may be sent to a nearer server. This tool asks once, fresh, from one location, so it is the best view of what the server itself returns.

A single HEAD request (or a tiny GET if the server does not support HEAD) to ports 80 and 443 of public addresses, following up to six redirects. It never sends your cookies or logins.

Type the address and press Check. The tool requests the page, follows any redirects and lists the status code and headers of every step.

Yes. It is free, needs no account and works on any public website.

A 301 says the page has moved for good, so search engines pass on the old address's value. A 302 says the move is temporary, so the old address stays the main one.
Free tools from Ucartz

Want a Faster, Safer Website?

Hosting with free SSL and engineers who tune servers. Send us your report and we will tell you what to change.

Free Basic Managed Support
99.9% Uptime SLA
24/7 Support