HTTP Header & Security Analyzer avatar

HTTP Header & Security Analyzer

Pricing

from $1.00 / 1,000 results

Go to Apify Store
HTTP Header & Security Analyzer

HTTP Header & Security Analyzer

Analyze HTTP response headers for many URLs — grade security headers (HSTS, CSP, X-Frame-Options, etc.), and report server/tech info, cookies, and Cloudflare. Great for security and SEO audits. No auth.

Pricing

from $1.00 / 1,000 results

Rating

0.0

(0)

Developer

alaudin burki

alaudin burki

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

4 days ago

Last modified

Share

Analyze HTTP response headers for many URLs — grade security headers (HSTS, CSP, X-Frame-Options, etc.), and report server/tech info, cookies, and Cloudflare. Great for security and SEO audits. No auth.

Built reliability-first: every row reports what was found and what was missing — you never get a silent blank, and a run summary tells you exactly what happened.

What you get

FieldDescription
urlUrl
httpStatusHttp Status
securityGradeSecurity Grade
securityScoreSecurity Score
missingHeadersMissing Headers
serverServer
cspCsp
hstsHsts

How to use it

  1. Fill in the input (see the example below).
  2. Run it once for a snapshot, or schedule it to keep the data fresh.
  3. Export to CSV/JSON/Excel, or push straight to Google Sheets, Notion, Airtable, Zapier, Make, or n8n.

Input

{
"urls": [
{
"url": "https://example.com"
}
],
"includeAllHeaders": false,
"useProxy": false,
"maxItems": 100000
}

Sample output

[
{
"url": "https://example.com/item/1",
"httpStatus": "ok",
"securityGrade": "example",
"securityScore": 4.5,
"missingHeaders": "example",
"server": "example",
"csp": "example",
"hsts": "example"
}
]

Typical uses

  • Security posture audits — grade many sites' security headers at once.
  • Tech fingerprinting — server/x-powered-by/Cloudflare across a list.
  • Compliance checks — verify HSTS/CSP are present after a change (schedule it).

Pricing

$1.00 / 1,000 results ($0.001 per result), plus a near-zero start fee. You are never charged beyond your limit, and blocked or failed items are reported honestly — not billed as data.

FAQ & limitations

  • Public data only — no login walls, no cookies required.
  • Rate limits on the source may require the proxy or a retry on very large pulls.
  • Every row reports its own status, so partial results are always labeled, never faked.
  • Integrations: output works with Zapier, Make, n8n, and any webhook via Apify's integrations.
  • Formats: results export as JSON, CSV, Excel, or HTML from the dataset.
  • SSL Certificate Checker
  • DNS Lookup
  • HTTP Header Analyzer