Network Tools

HSTS Checker Examples

Review practical HSTS Checker examples so you can understand expected input, output, and common patterns faster.

Why examples matter for HSTS Checker

Use this HSTS checker to verify whether a domain returns the Strict-Transport-Security header and inspect key values such as max-age, includeSubDomains, and preload. It is useful for HTTPS hardening, security reviews, deployment checks, and header validation.

Example pages are especially useful for network tools because they show what good input looks like, what kind of output to expect, and how the tool behaves in common scenarios.

HSTS Checker examples

Domain with HSTS enabled

Input

example.com

Output

Domain: example.com
HSTS: Present
Header: max-age=31536000; includeSubDomains; preload
Max-Age: 31536000
Include Subdomains: Yes
Preload: Yes

Shows a correctly returned HSTS header with common security directives.

Domain without HSTS

Input

example.com

Output

Domain: example.com
HSTS: Not present

Useful when checking whether a site still needs HSTS to be enabled.

How to use these examples

Enter a domain like example.com.
Run the checker to inspect the response headers.
Review whether the Strict-Transport-Security header is present.
Check max-age, includeSubDomains, and preload in the output.
Use the result to decide whether HSTS configuration needs changes.

Compare your own input with the HSTS Checker examples below before running the tool.
Keep the input format as close as possible to the example pattern when you test a new case.
If your output looks wrong, check spacing, separators, symbols, or the exact value type first.

Common mistakes in sample input

A full URL with paths is pasted instead of a clean domain.

Fix: Enter only the domain or hostname, such as example.com.

The site redirects or blocks the request and no HSTS result is returned.

Fix: Retry with the canonical HTTPS domain and confirm the site is reachable.

The header exists only on HTTPS but the test uses the wrong target.

Fix: Check the final secure hostname that serves the HTTPS response.

The domain has HSTS but expected directives are missing.

Fix: Review max-age, includeSubDomains, and preload separately in the output.

Next steps

After reviewing these examples, run the live tool with your own input. If your task involves a follow-up step, the related page can help you move to the next tool in the workflow.

Run the main tool

Open the main HSTS Checker page and test your own real input.

Open HSTS Checker