HTTP Header Analyzer.Every header, decoded.
Every response header decoded and graded — caching, security best-practice, compression, and a fix-first list ordered by impact.
HTTP Header Analyzer in four questions.
Cache-Control is the most misconfigured line on the web; the analyzer shows how edges and browsers will actually treat each directive combination.
CSP, HSTS, frame and content-type protections, present, absent, or present-but-wrong.
What was negotiated, what should have been, and what the difference costs in bytes.
One prioritized list, ordered by user-visible impact rather than alphabetical completeness.
How it works.
A transparent look at exactly what the tool checks, and how it reaches its answer.
Fetches the URL and decodes the response exactly as delivered, including the intermediary fingerprints along the way.
CoreHeader combinations are evaluated the way real caches resolve them, including the conflicts and precedence rules that trip people up.
CoreGraded against present-day guidance, including the security-header baseline we apply in assessments.
CoreFindings come with concrete corrected header values you can paste into a config.
SupportingWhat you’ll get.
Every response header, explained in plain language.
IncludedCaching, security, compression and delivery each graded separately.
IncludedOrdered by impact, with corrected values ready to copy.
IncludedA stable link for the pull request or the ops channel.
IncludedWho it’s for.
The fastest way to find the caching mistake that’s tanking your hit ratio.
Verify the header baseline before the pen test finds it for you.
One paste per environment, staging surprises caught before production.
Cache and compression headers are the cheapest CWV wins available.
Free to use. Live now in public beta.
The toolkit automates the detection and benchmark data behind the assessments we already run, the tools are how we prove the data is good.
Every tool ships free with shareable reports; the business model is the advisory behind it, not your email address.
The tool is live now in public beta — free to run, with detection we keep refining as we expand our signature coverage.
Want the answer before the tool exists? A free assessment runs the same analysis, human-graded, usually within 24 hours, and gives you a benchmark against pooled volume pricing.
HTTP Header Analyzer in context.
The research this tool automates.
More free CDN World tools
All part of the same toolkit — passive, non-intrusive, no signup.
HTTP Header Analyzer questions,
answered straight.
Is the analyzer live?
It’s live now in public beta in the CDN World toolkit — free to run. tools page.
Will it be free?
Yes, free with no signup, like every tool in the kit.
How is this different from viewing headers in DevTools?
DevTools shows you the headers; the analyzer tells you what they mean together: how caches will resolve conflicting directives, which security headers are absent, and what to change first, graded by the ruleset we use in paid assessments.
Does it check request headers too?
The first release focuses on responses, where nearly all of the fixable problems live; request-side analysis is on the roadmap.
Can it scan a whole site?
Launch scope is per-URL with shareable reports; crawling comes later.
I need an audit today.
A free assessment includes exactly this review, human-graded, usually within 24 hours.
All product names, logos and brands referenced in tool reports are the property of their respective owners and are used for identification purposes only. CDN World tools perform passive, non-intrusive analysis. Tool capabilities and launch timing described on this page are plans, not commitments, and may change.