HTTP Header Analyzer
Browse 50+ HTTP headers with descriptions and examples, build a security header set visually, parse raw HTTP headers instantly, and generate ready-to-use Apache .htaccess and Nginx config snippets. Reference Security Builder Header Parser Browse and search 50+ HTTP headers grouped by category. Click any header to see its description, common values, and an example. No headers match your search. Select and configure security headers below, then copy the generated snippet for Apache (.htaccess) or Nginx. Content-Security-Policy — Controls allowed resource origins Enable CSP header default-src 'self' 'self' 'unsafe-inline' 'none' * (any) script-src style-src img-src frame-src Strict-Transport-Security — HTTPS enforcement Enable HSTS max-age 30 days (2592000) 6 months (15552000) 1 year (31536000) includeSubDomains preload X-Frame-Options — Clickjacking protection Enable X-Frame-Options Value SAMEORIGIN DENY X-Content-Type-Options — MIME sniffing prevention Enable (always nosniff) Referrer-Policy — Controls referrer info sent Enable Referrer-Policy Policy no-referrer no-referrer-when-downgrade strict-origin-when-cross-origin same-origin origin Permissions-Policy — Browser feature control Enable Permissions-Policy camera=() microphone=() geolocation=() payment=() usb=() Generated Config Apache Nginx Copy Paste raw HTTP response headers below and click Parse to get a formatted, explained breakdown of each header. ...
