← All demos
Capability 01
Read the response headers this site returns
Fetch this page and list what actually came back, with a verdict on each header.
- Fetch API
- Caddy
- HTTP
ready
HEADERS · no data leaves your browser unencrypted
Security headers are usually asserted and never verified. This probe requests the page you are on and reports what the server actually sent, including compression, HSTS lifetime and whether the server software leaks.
It is deliberately self-critical: if a header is missing, it says so rather than hiding the row.