Parse raw HTTP request or response headers into a readable table, JSON structure, and quick audit view for security, caching, and CORS.
Mode
response
Headers
14
Duplicates
0
Malformed
0
Request / Status Line
The first line is detected automatically before header parsing starts.
Date
Sun, 12 Apr 2026 09:31:22 GMT
Timestamp when the message was generated.
Content-Type
application/json; charset=utf-8
The media type of the payload.
Content-Length
482
Response or request body length in bytes.
Cache-Control
public, max-age=300, stale-while-revalidate=60
Caching policy for clients or intermediaries.
ETag
"b7e0d5a"
Version identifier for cache validation.
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Forces future requests over HTTPS.
Content-Security-Policy
default-src 'self'; img-src 'self' https://images.example.com; object-src 'none'
Browser security policy controlling allowed resource sources.
X-Content-Type-Options
nosniff
Blocks MIME sniffing when set to nosniff.
X-Frame-Options
DENY
Controls whether the page may be framed.
Referrer-Policy
strict-origin-when-cross-origin
Controls how much referrer data is sent onward.
Permissions-Policy
camera=(), microphone=()
Fine-grained browser feature permissions.
Access-Control-Allow-Origin
https://app.example.com
Custom or less common header.
Vary
Origin, Accept-Encoding
Headers that affect cache differentiation.
Server
edge-cache
Server software or edge layer identifier.
Parse raw HTTP request or response headers into a readable table, structured JSON, and a lightweight audit view. This is useful when you are debugging API calls, CDN behavior, caching, CORS, or security header coverage.
The parser stops at the blank line that ends the header section. Any body content after that point is ignored and counted separately in the audit tab.
All processing happens locally in your browser. Your data never leaves your computer, ensuring complete privacy and security.
Check HTTP status codes, response headers and redirect chains for any URL.
Generate a unique URL to easily test, receive and inspect HTTP webhooks in real-time. View request headers, query parameters, JSON payloads, and more.
Calculate IPv4 subnets, network masks, broadcast addresses, and host ranges from IP and CIDR.