HTTP Header Analyzer
Inspect the HTTP response headers of any public URL. The request is made from the Cloudflare edge, so you see exactly what a remote client would receive.
Common response headers
| Header | What it tells you |
|---|---|
| server | The software serving the response (e.g. nginx, cloudflare, Apache). |
| content-type | The MIME type of the response body — e.g. text/html, application/json. |
| cache-control | Caching directives for browsers and CDNs (e.g. max-age=3600, no-store). |
| cf-cache-status | Whether Cloudflare served the response from cache: HIT, MISS, BYPASS, EXPIRED, etc. |
| strict-transport-security | Instructs browsers to only use HTTPS for the domain for a specified duration. |
For a full security header audit, use the Security Headers Scanner.