HTTP Security Headers Checker
Pricing
from $1.50 / 1,000 results
Check a list of URLs for HTTP security headers (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Grades each site, flags weak values (not just missing ones), and gives a copy-paste header block to fix it.
You can access the HTTP Security Headers Checker programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
$echo '{< "startUrls": [< {< "url": "https://apify.com"< }< ]<}' |<apify call autoloom/http-security-headers-checker --silent --output-datasetThe Apify CLI is the official tool that allows you to use HTTP Security Headers Checker locally, providing convenience functions and automatic retries on errors.
Using installation script (macOS/Linux):
$curl -fsSL https://apify.com/install-cli.sh | bashUsing installation script (Windows):
$irm https://apify.com/install-cli.ps1 | iexUsing Homebrew:
$brew install apify-cliUsing npm:
$npm install -g apify-cliOther API clients include: