Why HEAD and not GET?

HEAD is faster and downloads no body. We fall back to GET if the server rejects HEAD.

What does the security score mean?

It counts how many of 5 recommended security headers are present: HSTS, X-Frame-Options, CSP, X-Content-Type-Options, Referrer-Policy.

Yes, results are cached for 2 minutes per URL.

Can I check a staging URL?

Only public hostnames are allowed. Localhost and private IPs are blocked.

HTTP Headers Checker

Fetch response headers for any public URL. See a security summary for HSTS, CSP, and other key headers — plus all raw headers grouped by category.

See the real conversations behind this check

The moment you know your site, name, or profile is healthy, the next step is demand: find the people already discussing the problem you solve, ranked by buying intent.

Run your first search