Essentials
<title>, description, viewport,
canonical, and charset are the baseline. Missing any of
them measurably hurts ranking, mobile rendering, or duplicate-content handling.
Audit tool
Inspect meta tags and OpenGraph on any page.
Search engines, social previews, and browsers all read the metadata in your
<head>. Paste a URL or raw HTML and get a checklist of every tag
that matters for SEO, social cards, browser UI, and rendering performance.
Choose an input source
Fetched through the deployed Cloudflare Worker at
https://headerpilot-csp-checker-proxy.hpb21.workers.dev/?u=<encoded-target>.
If the target blocks cross-origin fetches, switch to Paste HTML.
Paste the full <head> (or the whole document) exactly as the
browser would receive it. Nothing is uploaded.
No check has been run yet.
Why this checklist exists
Every item below is something a real consumer reads before the page is shown.
OpenGraph & Twitter
These drive link previews on Slack, iMessage, LinkedIn, X/Twitter, Discord, and
Facebook. A missing og:image turns every shared link into a flat
URL.
Performance hints
preconnect, preload, and dns-prefetch tell
the browser where to open connections before the parser reaches them. Missing
hints are why the third-party tags always feel slow on first paint.
Related reading
Why these tags matter, and what to do about the missing ones.
Security Headers Checker
Audit the response headers that pair with the meta tags (CSP, HSTS, Referrer-Policy).
CSP Generator
Once the meta is in order, ship a Content-Security-Policy that matches the third parties you actually use.
Security headers best practices
The full HTTP-header baseline, with rollout order and platform-specific notes.