HTTP Headers
Headers your browser sent with this request.
Security Headers
Understanding HTTP Headers
Every time your browser requests a web page, it sends request headers — metadata about your browser, preferred languages, accepted formats, and more. The server responds with response headers that control caching, security, and content delivery.
Security headers are especially important. They protect against common attacks:
- HSTS forces HTTPS, preventing downgrade attacks
- CSP (Content Security Policy) blocks XSS and injection attacks
- X-Frame-Options prevents your site from being embedded in malicious iframes
- Referrer-Policy controls how much URL information is shared with other sites
This tool shows the headers your browser sent to iprobe.net. To check a different website's response headers, use browser DevTools (F12 → Network tab).
FAQ
What are HTTP headers?
HTTP headers are metadata sent with every web request. They contain information about your browser, accepted formats, cookies, and more. Servers also send response headers that control caching, security, and content delivery.
What are security headers?
Security headers like HSTS, CSP, and X-Frame-Options protect against common web attacks. They're set by the server and tell your browser how to handle the response securely.