HTTP Headers Parser & Explainer
Paste raw HTTP response headers and instantly get plain-English explanations for every header, a security analysis of which headers are present or missing, and colour-coded risk flags. Useful for auditing web servers, learning HTTP, and debugging response behaviour.
Frequently Asked Questions
What security headers should every website have?
The most important: Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
Does this tool make a request to the target site?
The tool fetches headers via a CORS-aware request from your browser. Some servers may block cross-origin requests.
Why are security headers missing on many sites?
Headers like CSP require careful configuration to avoid breaking functionality, so developers often skip them.
What does the security score mean?
The score reflects presence of key security headers weighted by importance. A perfect score requires all five critical headers.