Skip to main content

Headers Not Appearing

What This Means

This issue occurs when security headers expected from Steel Security are not visible in your site's responses.

You may have enabled header-related protections, but do not see them in browser tools.

Common Symptoms

  • expected headers are missing in the Network tab
  • no visible change after enabling header controls
  • inconsistent header behavior across requests

Why This Happens

This issue is commonly caused by:

  • caching (browser, server, or CDN)
  • server configuration not applying changes
  • headers being overridden or removed
  • testing the wrong request type

How to Fix It

Try the following steps:

1. Clear All Caches

  • clear your browser cache
  • clear any WordPress caching plugins
  • purge CDN caches (if applicable)

2. Perform a Hard Refresh

  • reload the page using a hard refresh (e.g., Ctrl+F5 or Cmd+Shift+R)
  • test in a private/incognito window

3. Verify the Correct Request

  • inspect the main document request (not assets like images or scripts)
  • ensure you are checking the correct URL

4. Check Server Configuration

  • confirm your server supports header rules
  • ensure configuration changes are applied
  • verify no conflicting rules exist

5. Check for Overrides

  • other plugins or server settings may override headers
  • review any manual header configurations
  • ensure Steel Security settings are not being overridden

What to Expect After Fixing

After resolving the issue:

  • security headers should appear in responses
  • browser developer tools should reflect the correct values
  • protections will be enforced as expected

How to Verify

  1. open browser developer tools
  2. navigate to the Network tab
  3. select the main page request
  4. review the Response Headers section

Confirm that expected headers are present.

When to Seek Help

If the issue persists:

  • note which headers are missing
  • document your server type
  • include details about caching or CDN usage
  • contact support with this information

Key Principle

Header visibility depends on correct configuration, caching behavior, and proper verification.

Back to top