View server HTTP response headers
Send a GET request to a public page and view its HTTP response headers. The result provides starting details about the content format, cache rules and published browser policies.
Enter a complete public HTTP or HTTPS address.
The tool displays headers received in response to a GET request.
Only headers actually returned by the server appear in the result.
Read cache rules, content types and security policies in the context of that response.
The tool does not calculate a security score or change server configuration.
Response and time limits apply; results may be cached for five minutes.
Enter a public URL without query parameters, a fragment or login credentials.
Only public HTTP/HTTPS addresses are checked, with time, size and redirect limits. Results are observations, not guarantees.
Read headers in the context of a response
Headers may differ by address, response status and intermediary services such as a CDN. One response does not describe the whole website. Before making a change, establish whether the rule comes from the application, web server or CDN.
Headers you may encounter
- Content-Type: document format and declared character encoding
- Cache-Control: cache behaviour rules
- Content-Security-Policy: a browser content policy
- X-Content-Type-Options and X-Frame-Options: additional browser rules
Frequently asked questions
Does a missing header establish that a site is vulnerable?
A header list alone is not enough for that conclusion. The rule needs to be considered alongside its relevance to the application, other policies and actual behaviour. This tool provides response data to support that investigation.
What would you like to make?
A short description and a way to reach you are enough to start.
info@siteman.az ↗+994 70 270 58 00