Tools

HTTP Headers Analyzer

Explain security and authentication headers while keeping the raw request local.

Authentication values are redacted in the explanation view.
HTTP headersOne Header-Name: value per line

Not present in this input: content-security-policy, strict-transport-security, x-content-type-options, referrer-policy. Missing headers are not automatically vulnerabilities; review them in the context of the response.

Private by design

Nothing is uploaded, logged, or saved. Avoid pasting live secrets into shared screens.