Pricing

from $1.00 / 1,000 successful lookups

Try for free

Go to Apify Store

Security Headers Checker: HSTS, CSP & Header Grade

Try for free

Check any website's security-relevant HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and more) and get an A-F letter grade in one request. No key, no browser, just the live headers a browser would see.

Pricing

from $1.00 / 1,000 successful lookups

Rating

0.0

(0)

Developer

Adrian Voss

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

Categories

Lead generation

Developer tools

You can access the Security Headers Checker: HSTS, CSP & Header Grade programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "items": [
12        "github.com"
13    ]
14};
15
16// Run the Actor and wait for it to finish
17const run = await client.actor("accountable_eel/security-headers-lookup").call(input);
18
19// Fetch and print Actor results from the run's dataset (if any)
20console.log('Results from dataset');
21console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
22const { items } = await client.dataset(run.defaultDatasetId).listItems();
23items.forEach((item) => {
24    console.dir(item);
25});
26
27// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Security Headers Checker: HSTS & CSP Grade by Domain API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security Headers Checker: HSTS, CSP & Header Grade API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security Headers Checker: HSTS, CSP & Header Grade API in Python

Security Headers Checker: HSTS, CSP & Header Grade API through CLI

Security Headers Checker: HSTS, CSP & Header Grade OpenAPI definition

Security Headers Checker: HSTS, CSP & Header Grade API

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and an A–F security grade. $0.02 per URL checked.

Broke to Built

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Security Headers Scanner

mahogany_songbird/security-headers-scanner

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Britton Furness

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

$1/1K 🔥 Fast HTTP security headers checker! HSTS, CSP, X-Frame & a grade for any URL. No key. JSON, CSV, Excel or API in seconds. Paste URLs & audit thousands of sites for security & compliance ⚡

ninhothedev

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

HTTP Headers Inspector - Full Headers + Security Grade

eliai/http-headers-inspector

Fetch every HTTP response header of any URL, plus a security-header analysis (HSTS, CSP, X-Frame-Options) with an A-F grade and server fingerprint. Single or bulk. $0.0004 per URL, cheaper than every paid headers actor measured; failed fetches are free.

Broke to Built