HTTP Headers Analyzer
Paste any HTTP response header block and get a plain-language explanation of every header, plus a security-headers audit (HSTS, CSP, X-Frame-Options...), cache-header analysis (Cache-Control, ETag, Last-Modified) and cookie attribute parsing (SameSite, Secure, HttpOnly).
Paste headers and click Analyze.
How to use the HTTP Headers Analyzer
Paste an HTTP response header block and the tool explains each header in plain language, flags risky security configurations, analyses caching behaviour and parses cookie attributes. Everything is processed locally in your browser.
What it checks
- Security headers — HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Missing or weak values are flagged as warnings.
- Cache headers — Cache-Control directives, ETag, Last-Modified, Expires and Age, with an assessment of whether the content is cacheable and for how long.
- Cookies — every Set-Cookie line is parsed: Secure, HttpOnly, SameSite, Path, Domain, Max-Age/Expires, and each attribute is explained (with SameSite cross-site risks).
Use a browser's Developer Tools → Network → a request's Response Headers, copy the block, and paste it here to get a readable security and caching review.