HTTP headers, redirects and security grade

Follow a URL's redirect chain and inspect its response headers, caching, compression and security headers, graded A to F.

Try . Free, no account needed.

Need this at scale?

The same lookup is one API call at 1 credit / request (one credit is $0.0003 to $0.001 depending on volume), with failed requests free.

cURL

curl "https://api.gridlode.com/v1/url/headers?url=http%3A%2F%2Fgithub.com" \
  -H "Authorization: Bearer $GRIDLODE_KEY"

Which security headers matter most?

Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, a frame-ancestors or X-Frame-Options policy, and Referrer-Policy.