HTTP Headers

The HTTP Headers tool fetches any URL and shows you the full response headers — status code, Content-Type, caching directives (Cache-Control, ETag, Last-Modified), compression (Content-Encoding), CORS headers, security headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options), CDN headers (CF-Cache-Status, X-Cache) and cookies. It's the fastest way to inspect what a web server is actually returning, without opening devtools or spinning up curl.

Developers use it to debug caching bugs, verify CDN configuration, confirm security-header rollouts, check redirect chains, and understand why a specific page is (or isn't) being cached at the edge. SEO auditors use it to check status codes and canonical tags at scale. Security teams use it to grade a site's security-header posture. Support engineers use it to reproduce customer bugs without needing local access.

Because the request runs from Cloudflare's edge, you get a fresh, uncached response every time — no browser cache in the way. Combine with our SSL Checker to verify certificate settings and Redirect Checker to trace multi-hop redirects.