HTTP Header Parser
Paste HTTP response headers, see what each means and get a security grade from A+ to F with a fix for each problem. Private.
Headers
Stays in your browserShortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)
Next steps
Done here? Use the Send to… menu on the result to carry it on to CSP Header Generator.
Free Online HTTP Header Parser
Copy the headers of a response from your browser tools or curl -I and paste them here. Each header is explained and the security headers are graded. It gives developers a quick browser-based way to solve a focused http header parser task before moving the result into a project.
How to use HTTP Header Parser
Paste the headers, one per line, as Name: value. A status line such as HTTP/2 200 is fine.
Common mistakes
- Pasting request headers: this tool grades response headers.
- Adding unsafe-inline to make a script work: use a nonce or a hash instead.
Frequently asked questions
How is the grade worked out?
It starts at 100 and loses points for each missing or weak security header, cookie flag or information leak. A+ is 97 or more, F is below 50.
Is a high grade a guarantee?
No. Headers are one layer of defence. They do not fix problems in the application itself.
Where do I get the headers?
In your browser: open developer tools, the Network tab, click the request and copy the response headers. Or run curl -I https://example.com.
Is anything uploaded?
No. This tool runs in your browser and nothing you enter is sent to a server.
How do I use this http header parser tool?
Use the interactive controls above; processing stays in your browser and the result is intended as a practical starting point for development work.
More DevOps & Network
Docker Compose BuilderBuild a Docker setup by picking servicesDockerfile LinterFind problems in a DockerfileKubernetes YAML ValidatorCheck Kubernetes files before deploying.env Parser & ValidatorCheck .env settings files.gitignore GeneratorCreate a .gitignore for your projectNginx Config GeneratorCreate a web server config.htaccess GeneratorCreate redirects and HTTPS ruleschmod CalculatorWork out file permission numbers