Security Headers Audit
Pricing
$250.00 / 1,000 completed audits
Security Headers Audit
One GET, a graded A-F verdict on the security headers browsers enforce: HSTS, CSP (unsafe-inline detection), X-Content-Type-Options, frame protection, Referrer-Policy, cookie flags, HTTPS, version disclosure. Each failure gets a concrete fix. Charged only on completed audits.
Pricing
$250.00 / 1,000 completed audits
Rating
0.0
(0)
Developer
Chris Arsenault
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
7 days ago
Last modified
Categories
Share
A graded security-header verdict for any URL, in one call. The checks a security reviewer runs first, productized: HSTS (with max-age strength), Content-Security-Policy (including unsafe-inline/unsafe-eval detection), X-Content-Type-Options, frame protection (XFO or CSP frame-ancestors), Referrer-Policy, Permissions-Policy, HTTPS enforcement, cookie flags (Secure/HttpOnly/SameSite), and version disclosure in Server/X-Powered-By.
Output
A graded summary:
Plus one row per check with the observed value, so the fix list is verifiable, not asserted.
Use cases
- Agencies and MSPs: the security line item for every site review, with evidence.
- Agents doing vendor or acquisition due diligence: grade a target's basic hygiene in seconds.
- Dev teams: run after every deploy; alert if the grade drops.
Honesty notes
- One polite GET to the URL (redirects followed and reported); nothing else is touched.
- This audits response headers — it is a hygiene check, not a penetration test, and the README will never pretend otherwise.
- Unreachable URLs report cleanly and you are not charged; billing is per completed audit.
Built by 1450 Enterprises, the team behind the WordPress Content Audit family and MCP Server Probe.
