Request any web address and see exactly what the server sends back: the status code, every redirect step, all response headers, timing, and a security grade for the headers that protect your visitors.
Headers are the extra lines a server sends with every page - they say what type of content it is, how long to cache it, which server software runs it, and which security rules the browser should enforce.
Strict-Transport-Security (forces HTTPS), Content-Security-Policy (limits where scripts can load from), X-Frame-Options (stops clickjacking), X-Content-Type-Options and Referrer-Policy. The tool grades these and tells you what is missing.
Each redirect adds delay. Aim for at most one hop - for example http://example.com straight to https://example.com - and link to the final address everywhere. The request path section shows every step and its timing.
Yes, up to 8 steps. Each step is shown with its own status, headers and timing, and the final step is what visitors actually get.