Read what the server sends first.
Inspect selected caching, indexing and security response headers without downloading the page body.
Displays selected headers from the final GET response after redirects; values are limited to 2,000 characters. Presence alone does not prove security. Cookies and authentication headers are never displayed.
Your results will appear here
Start with a URL. We’ll show what we found and what it means.
Public URL checks use Bostic servers and may reuse a result for 5 minutes. Do not submit private or signed URLs.
From a question to a next step.
Displays selected headers from the final GET response after redirects; values are limited to 2,000 characters. Presence alone does not prove security. Cookies and authentication headers are never displayed.
- 01Add your input
Inspect selected caching, indexing and security response headers without downloading the page body.
- 02Read the evidence
Displays selected headers from the final GET response after redirects; values are limited to 2,000 characters. Presence alone does not prove security. Cookies and authentication headers are never displayed.
- 03Make your next move
Create a Bostic account to verify your website, explore a full-site audit and follow changes over time. Plan limits apply.
One page is a start. See the whole picture.
Create a Bostic account to verify your website, explore a full-site audit and follow changes over time. Plan limits apply.
Continue with Bostic