Before you start
What you need
Raw HTTP response or request header lines copied from an authorized source.
Developer & Data
HTTP Header Inspector
Parse pasted HTTP headers and review common delivery, cache, and browser-policy controls.
- 01Runs in this browser
- 02Limits are explicit
- 03Copy or download output
No black box
How this tool handles the input
The parser normalizes names, preserves values, and reports the presence of common security and delivery controls without making a request.
What you get
What the page gives back
A JSON inventory, common-control presence checks, cache facts, and content type.
Keep in mind
Use the result responsibly
Header presence is not proof that a policy is correct. Values must be reviewed for the specific route, browser, proxy, and threat model.
Practical uses
Where this tool earns its place
- Review headers copied from browser developer tools.
- Compare cache policy between environments.
- Spot missing common browser policy headers.
Verified data boundary
Source text stays on this page.
The published contract marks these tools as client-only processing. Nirmion uses the API only to confirm that this workspace is enabled in MySQL; source values and results are not sent to Flask.