Request Header Inspector

API & Backend

Parse raw HTTP headers and see what each one actually does.

Runs entirely in your browser โ€” nothing is uploaded

Features

  • Paste raw headers and get a parsed, explained table.
  • Reference notes for every standard header.
  • Decodes User-Agent, Accept and Cache-Control into readable parts.
  • Flags missing security headers on responses.

How to use the Request Header Inspector

  1. 1Paste the raw header block from your logs or dev tools.
  2. 2Read the parsed table with per-header explanations.
  3. 3Check the security notes for anything missing.

Frequently asked questions

Which security headers should a response include?

Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy and a sensible frame policy cover most needs.