Site checker

Enter a URL and see its full redirect chain, response headers and a checklist of security headers: HSTS, CSP, X-Frame-Options and friends.

Enter a URL and see its full redirect chain, response headers and a checklist of security headers: HSTS, CSP, X-Frame-Options and friends.

How to use

  1. Enter the URL
  2. Follow the redirect chain and status codes
  3. Review the security header checklist

Frequently asked questions

Which security headers matter most?

HSTS forces HTTPS, CSP restricts where scripts load from, X-Frame-Options blocks clickjacking — the top three to start with.

Why check the redirect chain?

Extra hops slow the page down and can leak URL parameters; ideally one redirect at most.

Why do results differ from my browser?

Some servers vary answers by user agent, cookies or region — the tool requests from its own server without your cookies.