Sends a GET or HEAD request to a URL and shows you what came back: status
code, response headers, content type/length, compression, how many redirects it took to
get there, and which of the common security headers (HSTS, CSP, X-Frame-Options,
X-Content-Type-Options, Referrer-Policy) are missing. This is a diagnostics tool, not a
REST client — it doesn't send custom headers/bodies or other methods.
Requires a live network request, made server-side (a browser can't read
raw cross-origin response headers itself). Nothing you inspect is logged or stored.
A note on scope
For safety, requests to localhost, private/loopback/link-local IP ranges, and non-http(s)
schemes are blocked — this tool can't be used to probe internal network targets. Redirects
are followed automatically (up to 20 hops) to reach the final response; for a step-by-step
view of the redirect chain itself, use the Redirect
Inspector. Response bodies are never downloaded or displayed — only headers/metadata.
See also the URL Encoder/Decoder for working with the URL
itself, and the JSON Formatter if the response body is JSON
you want to paste in and inspect separately.