# Website Health Report - DNS, TLS & Security Headers Audit (`cuantic_data/website-health-report`) Actor

Audits a domain's DNS resolution, TLS certificate expiry, HTTP availability and security headers (HSTS, CSP, X-Frame-Options...) in one run. No login, no third-party API keys needed - built for recurring monitoring of your own sites.

- **URL**: https://apify.com/cuantic\_data/website-health-report.md
- **Developed by:** [Cuantic Data](https://apify.com/cuantic_data) (community)
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $30.00 / 1,000 domain auditeds

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.

Learn more: https://docs.apify.com/actors/running/actors-in-store.md#pay-per-event

## What's an Apify Actor?

An Actor is a serverless cloud program that runs on the Apify platform. It has two run modes.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.

Apify vocabulary and the platform model are defined once, in the agent quickstart at https://apify.com/agents.md.

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For examples already wired to this Actor's own input schema, see the [API](#api) section below.

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).

# README

## Website Health Report — DNS, TLS & Security Headers Audit

Audits one domain per run: DNS resolution, TLS certificate expiry, HTTP availability, and security headers. No login. No third-party API keys. Built for recurring monitoring of sites you own or manage.

**Store:** [cuantic\_data/website-health-report](https://apify.com/cuantic_data/website-health-report)

### What you get

| Check | Details |
|---|---|
| DNS | A/AAAA resolution |
| TLS | Issuer, validity window, days until expiry (warns < 30 days), authorized flag |
| HTTP | Status, response time, final URL after redirects |
| Security headers | HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy |
| Issues | Plain-text `issues[]` ready for alerts or client reports |

### Input

| Field | Type | Required | Description |
|---|---|---|---|
| `url` | string | Yes | One `http(s)` URL / domain per run |

```json
{ "url": "https://example.com" }
```

### Output (dataset item)

```json
{
  "url": "https://example.com",
  "hostname": "example.com",
  "dns": { "ipv4": ["93.184.216.34"], "ipv6": [], "error": null },
  "tls": {
    "issuer": "DigiCert",
    "validFrom": "2026-01-01T00:00:00.000Z",
    "validTo": "2027-01-01T00:00:00.000Z",
    "daysUntilExpiry": 103,
    "authorized": true
  },
  "http": {
    "status": 200,
    "ok": true,
    "finalUrl": "https://example.com/",
    "responseTimeMs": 184,
    "missingSecurityHeaders": ["content-security-policy"]
  },
  "issues": ["Missing security headers: content-security-policy."],
  "issueCount": 1,
  "checkedAt": "2026-09-21T12:00:00.000Z"
}
```

### Pricing

Pay per event: **USD 0.03 per domain audited** (`domain-audited`). You are not charged if the run fails before writing a result.

### Keywords (Store SEO)

`website health`, `DNS audit`, `TLS certificate expiry`, `SSL monitor`, `security headers`, `HSTS`, `CSP`, `X-Frame-Options`, `site monitoring`, `agency website check`, `pre-launch audit`

### Limits & honesty

- One domain per run (schedule N runs for N domains).
- Public internet protocols only — does not log in, bypass paywalls, or scrape private apps.
- Does **not** score on-page SEO or Core Web Vitals (use a dedicated Lighthouse Actor for that).

### Support

Bugs: open an issue on the Actor page or email `cuanticwindows@gmail.com` (reply within 72h).

***

### Español

## Website Health Report — Auditoría DNS, TLS y cabeceras de seguridad

Audita un dominio por run: resolución DNS, vencimiento del certificado TLS, disponibilidad HTTP y cabeceras de seguridad. Sin login. Sin API keys de terceros. Pensado para monitoreo recurrente de sitios propios o de clientes.

**Store:** [cuantic\_data/website-health-report](https://apify.com/cuantic_data/website-health-report)

### Qué entrega

| Chequeo | Detalle |
|---|---|
| DNS | Resolución A/AAAA |
| TLS | Emisor, vigencia, días al vencimiento (alerta < 30 días) |
| HTTP | Status, latencia, URL final tras redirects |
| Cabeceras | HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy |
| Hallazgos | Lista `issues[]` en texto plano para alertas o reportes |

### Input

| Campo | Tipo | Requerido | Descripción |
|---|---|---|---|
| `url` | string | Sí | Una URL `http(s)` / dominio por run |

```json
{ "url": "https://ejemplo.com" }
```

### Pricing

Pay per event: **USD 0.03 por dominio auditado**. No se cobra si el run falla antes de escribir resultado.

### Keywords

`auditoría web`, `salud de sitio`, `certificado SSL`, `vencimiento TLS`, `cabeceras de seguridad`, `HSTS`, `CSP`, `monitoreo agencia`, `SEO técnico LatAm`

### Límites (sin humo)

- Un dominio por run.
- Solo protocolos públicos.
- No mide SEO on-page ni Core Web Vitals.

### Soporte

`cuanticwindows@gmail.com` — respuesta en 72h.

# Actor input Schema

## `url` (type: `string`):

http(s) URL of the domain. If https, the TLS certificate is audited too.

## Actor input object example

```json
{
  "url": "https://apify.com"
}
```

# Actor output Schema

## `results` (type: `string`):

The full DNS/TLS/HTTP audit, as a single dataset item.

## `runSummary` (type: `string`):

Hostname audited and total number of issues found.

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "url": "https://apify.com"
};

// Run the Actor and wait for it to finish
const run = await client.actor("cuantic_data/website-health-report").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "url": "https://apify.com" }

# Run the Actor and wait for it to finish
run = client.actor("cuantic_data/website-health-report").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
for item in client.dataset(run.default_dataset_id).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "url": "https://apify.com"
}' |
apify call cuantic_data/website-health-report --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "type": "http",
            "url": "https://mcp.apify.com/?tools=fetch-actor-details,cuantic_data/website-health-report"
        }
    }
}
```

The hosted server signs you in with OAuth on first connect, so no API token belongs in this config. Clients without OAuth support can send an `Authorization: Bearer <APIFY_API_TOKEN>` header instead, using a token from API & Integrations in Apify Console (https://console.apify.com/settings/integrations).

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/FZg7m5ZxNbuQOkRBg/builds/KBQ3qiFC4fjV7cDvP/openapi.json