Free tool

HTTP Header & Status Code Checker

Enter a URL to see its status code, full redirect chain, response time, and headers — including missing security headers like HSTS and CSP.

Questions

Does this follow redirects?

Yes — up to 10 hops, showing the full chain so you can spot unwanted redirect loops or an extra hop you didn't expect.

What security headers does this check for?

Strict-Transport-Security (HSTS), Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and Permissions-Policy — a common baseline, not an exhaustive security audit.

Can I check an internal or private URL?

No — this runs server-side, so requests to localhost or private/internal IP ranges are blocked, including ones reached via a redirect, to avoid using the tool to probe internal networks.

Related

Need real alerts, not just a calculator?

Pingtastic pages you the moment a cron job or site actually goes down.

Get started — $5/month