HTTP Response Headers Explainer
Explain pasted response fields, duplicates and missing security headers with every value redacted in shareable reports.
headers-explainerLOCAL WORKSPACE
1. Configure and explore
Inputs stay in this tab; no browser persistence, page-URL encoding or network requests.
2. Results and interpretation
Choose a sample, fill the fields or explore the flow.
Presence alone cannot prove a safe policy. No endpoint is fetched and HTTP/2 wire format, body data or multiple response blocks are rejected.
Data / rules date: 2026-10-21 · Official source
How to use this tool
Paste one HTTP/1.x response header block. Inspect categories and explanations, then copy the masked report.
When not to use it
Presence alone cannot prove a safe policy. No endpoint is fetched and HTTP/2 wire format, body data or multiple response blocks are rejected.
Read the guide →