Local tool / HTTP headers
HTTP response
header review.
Paste a non-sensitive response-header sample. This tool checks selected header signals in your browser; it does not contact a website or prove a vulnerability.
Do not paste Set-Cookie, Authorization, secrets or client records. Sample loading uses fictional data.
Selected signals
Paste a sample, then choose Inspect headers.
Presence does not establish effectiveness. Missing headers are not automatically exploitable vulnerabilities. OWASP Secure Headers reference ↗