Pricing

from $0.50 / 1,000 url auditeds

HTTP & Security Headers Auditor

Audit any list of URLs: status, final redirect, HTTPS, server, security headers (HSTS, CSP, X-Frame-Options...), a security score, page title and CMS/generator. No key, no proxy.

Pricing

from $0.50 / 1,000 url auditeds

Rating

0.0

(0)

Developer

Bruno

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

Checks

Status code + redirect (input vs final URL)
HTTPS enforced
Server / X-Powered-By
Security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP
Security score (% of recommended headers present)
Page <title> and CMS/generator meta
Set-Cookie count

Input

{ "urls": ["https://github.com", "example.com"] }

Output (per URL)

{
  "final_url": "https://github.com/",
  "status": 200,
  "https": true,
  "server": "GitHub.com",
  "security_headers_present": { "strict-transport-security": "max-age=31536000", "content-security-policy": "default-src 'none'" },
  "security_headers_missing": ["permissions-policy"],
  "security_score": 86
}

Use cases

Bulk website security / compliance audits
Technical SEO (HTTPS, redirects, headers)
Monitoring your own or competitors' sites

Billed per URL audited.

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Sanskar Jaiswal

HTTP Security Headers & OWASP Posture Auditor

gp005/security-headers-auditor

Audit HTTP security response headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP) for any URL. Returns a 0-100 grade, letter rating, and a prioritized fix list with exact header values to add. Single polite GET per URL, no crawling.

Geo

GEO & llms.txt Readiness Auditor

gp005/geo-llms-auditor

Audit which AI crawlers (GPTBot, ClaudeBot, PerplexityBot, Googlebot, and 30+ more) your site allows or blocks, validate your llms.txt, and score AI-citability — with an exact prioritized fix list. Non-scraper, reads public well-known files.

Geo

SSL/TLS Certificate Expiry Monitor

gp005/tls-cert-monitor

Bulk-check TLS certificates for any HTTPS hosts: days-to-expiry, expiry alerts, and issuer/SAN/fingerprint change detection. Pure protocol, no scraping.

Geo

Bulk Image Converter & Optimizer

gp005/bulk-image-converter

Convert, resize, compress, and strip metadata from many images at once — to WebP, AVIF, JPEG, or PNG. Use as a serverless image optimization API for bulk image conversion, compression, and resizing. Pure compute on image URLs you supply; no scraping.

Geo

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.

Manchitt Sanan

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and a security grade. Pay per result â€” cost is bounded by the URLs you submit.

Anthony Snider

OSINT Website Intelligence Analyzer

onescales/website-intelligence-analyzer-osint

All-in-one website analysis tool. Run 30 OSINT checks on any URL — DNS, SSL, WHOIS, tech stack, security headers, email security, open ports, and more. Get a complete site profile in seconds.