# Audit security headers and SSL expiry for 5 well-known sites

**Use case:** 

Checks github.com, wikipedia.org, mozilla.org, cloudflare.com and python.org for HTTP security headers (HSTS, CSP, X-Frame-Options and more), SSL certificate issuer and days until expiry, TLS version, HTTPS redirect and cookie flags, with an A-F grade and fixes per site. Paste your own sites to audit them. Passive checks only.

## Input

```json
{
  "urls": [
    "github.com",
    "wikipedia.org",
    "mozilla.org",
    "cloudflare.com",
    "python.org"
  ],
  "certExpiryWarningDays": 21,
  "checkHttpRedirect": true,
  "maxConcurrency": 10
}
```

## Output

```json
{
  "inputUrl": {
    "label": "Input url"
  },
  "grade": {
    "label": "Grade"
  },
  "score": {
    "label": "Score"
  },
  "statusCode": {
    "label": "Status code"
  },
  "httpsRedirect": {
    "label": "Https redirect"
  },
  "tlsVersion": {
    "label": "Tls version"
  },
  "certIssuer": {
    "label": "Cert issuer"
  },
  "certDaysLeft": {
    "label": "Cert days left"
  },
  "hsts": {
    "label": "Hsts"
  },
  "csp": {
    "label": "Csp"
  },
  "xFrameOptions": {
    "label": "X frame options"
  },
  "missingHeaders": {
    "label": "Missing headers"
  },
  "topIssue": {
    "label": "Top issue"
  }
}
```

## How it works

### 1. Sign up on Apify or log in

The Bulk Security Headers & SSL Expiry Checker Actor is ready to run with the inputs already set for "Audit security headers and SSL expiry for 5 well-known sites". [Sign up or log in](https://console.apify.com/create-task-from-example/JaDcKDppyA0SLcLYx) and you'll land in Apify Console with a copy of this exact task.

### 2. Start the "Audit security headers and SSL expiry for 5 well-known sites" task

The Bulk Security Headers & SSL Expiry Checker Actor will start running based on the input automatically. You can also change all the input fields, like websites, certificate expiry warning (days), and more, to match your specific use case.

### 3. Receive the "Audit security headers and SSL expiry for 5 well-known sites" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as input url, grade, score, and more.

### 4. Integrate into your workflow

The final output is delivered in JSON, CSV, or Excel format, ready to be plugged into your workflow. You can also [run the "Audit security headers and SSL expiry for 5 well-known sites" task via API](https://apify.com/batreek/security-headers-ssl-audit.md).

## About this Actor

This example demonstrates how to use [Bulk Security Headers & SSL Expiry Checker](https://apify.com/batreek/security-headers-ssl-audit.md) with a specific input configuration. Visit the [Actor detail page](https://apify.com/batreek/security-headers-ssl-audit.md) to learn more, explore other use cases, and run it yourself.


## How to integrate an Actor?

This Task's input is already configured above. Use it as-is rather than inventing a new one.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For full API examples (JavaScript, Python, CLI, MCP, OpenAPI), see this Task's Actor page: https://apify.com/batreek/security-headers-ssl-audit.md

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).