Runs locally — nothing is uploaded
Result
Paste raw HTTP headers.
How to use
- 1Copy headers from devtools (Network → request → Headers) or from curl -I / curl -v.
- 2Paste them and choose the output.
- 3Read the security checks for responses or copy the code for requests.
One point each for HSTS, a CSP without unsafe-inline or unsafe-eval for scripts, X-Content-Type-Options, framing protection, Referrer-Policy and Permissions-Policy: 6 is A, 5 B, 4 C, 3 D, fewer F.
Yes, including pseudo-headers like :authority and :path; they are used to rebuild the URL for curl.
Pseudo-headers and Content-Length are set by the HTTP client itself; sending them by hand breaks requests.
Related tools
Need data from a website?
Send the URL and fields — we reply with a free sample and a quote.