HTTP Headers and Redirect Checker
Read the response headers, the security report, and the redirect chain of a URL.
Processed with Bun
This tool uses Bun.fetch on the server. One request gives all three views.
Sent as the Origin request header. Leave it empty to skip the CORS check.
Send OPTIONS.
About the HTTP Inspector
This tool sends one request to a URL. It then shows three views of the answer: the security report, the response headers, and the redirect chain.
The security view scores CSP, HSTS, X-Content-Type-Options, X-Frame-Options, and the Access-Control-Allow-* headers, and it gives a fix for each problem. The header view lists every response header. The redirect view lists each hop, with a maximum of 5.
Enter a URL. To test CORS, set a request Origin. To send an OPTIONS preflight, turn on CORS preflight. Then select Inspect. The tool does not store your input.