Pricing

$1.00 / 1,000 row returneds

Try for free

Go to Apify Store

Security Headers Grader — one row per domain

Try for free

Grades the security headers of every domain in a list: HSTS, CSP, X-Frame-Options and more, plus TLS. No browser needed, so it runs fast and cheap over large lists.

Pricing

$1.00 / 1,000 row returneds

Rating

0.0

(0)

Developer

The Artifact Machine

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Categories

Developer tools

Lead generation

You can access the Security Headers Grader — one row per domain programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "domains": [
9        "basecamp.com",
10        "linear.app",
11    ] }
12
13# Run the Actor and wait for it to finish
14run = client.actor("artifact-machine/security-headers-enrichment").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
18for item in client.dataset(run.default_dataset_id).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Security Headers Grader API in Python

The Apify API client for Python is the official library that allows you to use Security Headers Grader — one row per domain API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Security Headers Grader — one row per domain API in JavaScript

Security Headers Grader — one row per domain API through CLI

Security Headers Grader — one row per domain OpenAPI definition

Security Headers Grader — one row per domain API

HTTP Probe -- TLS, Security Headers, Redirects

jungle_synthesizer/ssl-security-headers-checker

Bulk site-health probe: TLS certificate, security-header grading (CSP, HSTS, X-Frame-Options, Permissions-Policy + 5 others, A/B/C/D/F grade), redirect chain, TTFB, HTTP/2 + HTTP/3, IPv6 reachability. Built for devops, security, and CI pipelines.

BowTiedRaccoon

Website Tech Stack Detector — 100+ Technologies

ryanclinton/website-tech-stack-detector

Identify the technologies, frameworks, and services running on any website. Website Tech Stack Detector crawls one or more URLs, inspects HTTP headers, HTML meta tags, script sources, and body content, then matches them against a fingerprint database of 106 web technologies across 17 categories.

Ryan Clinton

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

$1/1K 🔥 Fast HTTP security headers checker! HSTS, CSP, X-Frame & a grade for any URL. No key. JSON, CSV, Excel or API in seconds. Paste URLs & audit thousands of sites for security & compliance ⚡

ninhothedev

Domain Intelligence: WHOIS/RDAP, DNS, SSL & Security Headers

arthursbuisness/domain-intelligence-rdap-dns-ssl-headers

Arthur

Domain Health Audit: DNS, WHOIS, SSL, SPF, DKIM & DMARC

apifmcpfactory/domain-health-audit

Audit 1 to 5,000 domains for DNS, WHOIS, SSL, HTTP and email-authentication problems, and get the exact DNS records to publish to fix each one. Scored, exportable, with a client-ready report. Validated against RFC 9989. For people and AI agents.

Howth Technology Factory

Full Site Health Suite

zaden/full-site-health-suite

Runs SEO, sitemap, broken-link, SSL, email/DNS, structured-data, accessibility, domain-expiry, and RSS checks on a site in one job. Get a single letter grade and severity-ranked issue list instead of nine separate reports. Only need one check? Each of the 9 is also sold standalone.

Zaden

Security Headers Lookup — HSTS, CSP & Header Grade API

accountable_eel/security-headers-lookup

Check any website's security-relevant HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and more) and get an A-F letter grade in one request. No key, no browser, just the live headers a browser would see.

Adrian Voss

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Website Metadata & Tech Profiler — Bulk URL Inspector

weiseer/website-metadata-tech-profiler

Bulk-profile URLs: final URL & status, title/meta/Open Graph, server + security headers, and tech hints. One JSON row per URL.

wei seer

Tech Stack Audit — Website Technology Detector with Evidence

power_on/tech-stack-audit

Detect a website's tech stack with a real browser: CMS, ecommerce, frameworks, CDN, analytics and pixels. Returns the version and how old it is, which trackers really fire, security headers, cookies set before consent — and the evidence for every detection.