Request Header Inspector
API & BackendParse raw HTTP headers and see what each one actually does.
Runs entirely in your browser โ nothing is uploaded
Features
- Paste raw headers and get a parsed, explained table.
- Reference notes for every standard header.
- Decodes User-Agent, Accept and Cache-Control into readable parts.
- Flags missing security headers on responses.
How to use the Request Header Inspector
- 1Paste the raw header block from your logs or dev tools.
- 2Read the parsed table with per-header explanations.
- 3Check the security notes for anything missing.
Frequently asked questions
Which security headers should a response include?
Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy and a sensible frame policy cover most needs.