Check
View HTTP headers
Public pages only, one at a time
Free, up to 30 requests per 10 minutes per visitor.
Public only, entered by you
Snoei only reads pages that anyone can see without logging in, and only the address you enter. It skips login pages.
No email addresses or phone numbers
Snoei refuses to collect them. Links to mailto: and tel: are only counted, never shown or exported.
Copyright stays
Texts, tables and images belong to whoever made them. Use them to check or to quote with a source, not to copy.
One page at a time
No crawling of whole sites. Snoei reads what you give, at most checks the links or language versions of that one page, follows robots.txt and keeps the pace low.
How it works
View HTTP headers in three steps
Paste the address
Of a public page, with or without https://.
Follow the route
Snoei shows every redirect with its code, up to the final address.
Read the grade
From A+ to F, with what each security header does and whether it is set well.
Questions
Good to know
Why can’t I see the value of cookies?
A cookie can carry a session. Snoei only shows the name of each cookie the server sets, never the value, and never sends cookies itself.
How is the grade worked out?
Six points count: HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and protection against framing. Without https it is always F.
Does Snoei read the page itself?
No. For this tool Snoei requests the page, reads the headers and closes the connection before the content arrives.