Ad
Common use cases
- Audit security headers (HSTS, CSP, X-Frame-Options)
- Debug caching behaviour from CDN
- Verify server identity headers
- Check redirect chain final URL
Frequently asked questions
Why does it use HEAD instead of GET?
HEAD requests fetch only headers, not the body — faster and lighter on the target server. Some servers reject HEAD; in that case the inspector will return an error.
Why are some sites blocked?
Sites behind authentication, with strict bot protection (Cloudflare challenge), or that require specific headers may refuse the request. The 8-second timeout will trip and report an error.
Are my queries logged?
The URL is sent to the server to perform the fetch. The URL itself isn't persisted in analytics (only the path /tools/http-headers is logged).