HTTP Security Headers Checker
Grade a site's security headers and cookies and get the header lines to add.
Related tools
- TLS CheckerInspect a site's TLS certificate, expiry, issuer and negotiated protocol, with a full report.
- Redirect CheckerTrace redirects from http and https, with and without www, to the final URL and spot loops and extra hops.
- SEO MetadataCheck a page's title, description, canonical, robots and Open Graph tags.
- Domain HealthOne check for DNS, email authentication, TLS, security headers and redirects, with a grade per area and a full report.
About this tool
Grade a site's security headers and cookies and get the header lines to add.
How to use it
- Open the HTTP Headers tool.
- Enter the public domain, hostname or IP address you want to check.
- Run the check; XGM queries it from its server and lists the findings.
- Copy the output only after checking it looks correct.
- Use related XGM tools if you need a broader diagnostic view.
FAQ
Is the HTTP Headers free to use?
Yes. The HTTP headers checker is free and works without creating an account.
Does XGM store my input for HTTP Headers?
Browser-side utilities process input locally. Server checks send only the domain, host or IP you enter to the XGM API and do not store it.
Can I use HTTP Headers for production checks?
Yes, use it for quick validation and troubleshooting. For critical changes, confirm the result with your official provider, logs, monitoring or security stack.
What should I do after using the HTTP headers checker?
Compare the result with related signals, save useful evidence and follow the linked XGM guide or related tools if you need a wider check.
Read the full HTTP Security Headers Checker guide