HTTP Header Viewer
Follows redirects and reports each hop, then grades the final response against the security headers a modern site should set.
Runs on the server
Web
Security headers
What the final response sets, and what it omits.
Redirect target resolves to a private address — not followed.
This form is protected from spam by Cloudflare Turnstile, which loads a script from Cloudflare.