HTTP Header & Security Analyzer
Pricing
from $1.00 / 1,000 results
HTTP Header & Security Analyzer
Analyze HTTP response headers for many URLs — grade security headers (HSTS, CSP, X-Frame-Options, etc.), and report server/tech info, cookies, and Cloudflare. Great for security and SEO audits. No auth.
Pricing
from $1.00 / 1,000 results
Rating
0.0
(0)
Developer
alaudin burki
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
4 days ago
Last modified
Categories
Share
Analyze HTTP response headers for many URLs — grade security headers (HSTS, CSP, X-Frame-Options, etc.), and report server/tech info, cookies, and Cloudflare. Great for security and SEO audits. No auth.
Built reliability-first: every row reports what was found and what was missing — you never get a silent blank, and a run summary tells you exactly what happened.
What you get
| Field | Description |
|---|---|
url | Url |
httpStatus | Http Status |
securityGrade | Security Grade |
securityScore | Security Score |
missingHeaders | Missing Headers |
server | Server |
csp | Csp |
hsts | Hsts |
How to use it
- Fill in the input (see the example below).
- Run it once for a snapshot, or schedule it to keep the data fresh.
- Export to CSV/JSON/Excel, or push straight to Google Sheets, Notion, Airtable, Zapier, Make, or n8n.
Input
{"urls": [{"url": "https://example.com"}],"includeAllHeaders": false,"useProxy": false,"maxItems": 100000}
Sample output
[{"url": "https://example.com/item/1","httpStatus": "ok","securityGrade": "example","securityScore": 4.5,"missingHeaders": "example","server": "example","csp": "example","hsts": "example"}]
Typical uses
- Security posture audits — grade many sites' security headers at once.
- Tech fingerprinting — server/x-powered-by/Cloudflare across a list.
- Compliance checks — verify HSTS/CSP are present after a change (schedule it).
Pricing
$1.00 / 1,000 results ($0.001 per result), plus a near-zero start fee. You are never charged beyond your limit, and blocked or
failed items are reported honestly — not billed as data.
FAQ & limitations
- Public data only — no login walls, no cookies required.
- Rate limits on the source may require the proxy or a retry on very large pulls.
- Every row reports its own status, so partial results are always labeled, never faked.
- Integrations: output works with Zapier, Make, n8n, and any webhook via Apify's integrations.
- Formats: results export as JSON, CSV, Excel, or HTML from the dataset.
Related actors
- SSL Certificate Checker
- DNS Lookup
- HTTP Header Analyzer