Website Security Audit: SSL, Headers, Email DNS & Exposure avatar

Website Security Audit: SSL, Headers, Email DNS & Exposure

Pricing

from $4.00 / 1,000 sites

Try for free
Go to Apify Store
Website Security Audit: SSL, Headers, Email DNS & Exposure

Website Security Audit: SSL, Headers, Email DNS & Exposure

Try for free

Bulk passive security audit of your websites: SSL/TLS, HTTP security headers (A–F), SPF/DMARC, HTTP health, security.txt, and exposed .env/.git checks. 0–100 score + fixes. $4 per 1,000 sites. Authorized sites only.

Pricing

from $4.00 / 1,000 sites

Rating

0.0

(0)

Developer

Andrew Shamah

Andrew Shamah

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

4 days ago

Last modified

Categories

Developer tools

SEO tools

Automation

Features

Limited permissions

Share

Passive security audit for websites you own or are authorized to assess. One run gives a 0–100 score, A–F grade and a plain-English findings list covering:

AreaWhat is checked
SSL/TLSExpiry, hostname match, trust, protocol
HTTP security headersHSTS, CSP, XFO, XCTO, Referrer-Policy, Permissions-Policy, server leaks
Email DNSSPF, DMARC, MX (spoofing / deliverability)
HTTP healthStatus, latency, final URL
ExposurePlain GET existence check for /.env, /.git/HEAD, /.git/config, common config leftovers — never dumps secrets (≤256 bytes to confirm)
security.txtRFC 9116 contact / policy

No browser, no port scan, no exploitation. Failed / unreachable sites are free.

Price: $4 per 1,000 sites ($0.004 per site audited) + $0.00005 start.

Use only on systems you are authorized to test. This is an exposure / hygiene audit, not a penetration test.

Fast free-tier try

{ "urls": ["https://apify.com", "https://example.com"], "maxSites": 2 }

Example output (abridged)

FieldExample
score / grade78 / C
findings[]{ severity: "high", check: "hsts", message: "Missing Strict-Transport-Security" }
ssl.daysLeft64
headers.gradeB
emailDns.dmarcPolicyquarantine
exposure[][{ path: "/.env", confirmed: true, hint: "Looks like an env file" }]

Pricing

$0.004 per site audited. Unreachable hosts are not charged. Cap cost with maxSites or Maximum cost per run.

Built by DataForgeHQ. Open an issue — I usually reply within a day.

You might also like

Security Headers Checker avatar

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

User avatar

SAHIL KUMAR

78

Website Audit Orchestrator avatar

Website Audit Orchestrator

constant_quadruped/website-audit-orchestrator

One-click comprehensive website audit. Combines Site Health Scanner (broken links, redirects, errors) with Lighthouse Auditor (performance, accessibility, SEO, best practices). Generates unified HTML report with overall health score and prioritized issues.

User avatar

CQ

29

WS

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.004 per URL plus $0.001 per run.

User avatar

Hojun Lee

4

SH

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

User avatar

Bikram Adhikari

3

HTTP Headers Security Audit avatar

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

User avatar

Techionik

2

S&

SSL & Security Headers Audit: TLS cert, HSTS, CSP, grade

sea_sorghum/ssl-security-headers-audit

Bulk-audit TLS certificate (issuer, expiry, protocol, chain) and HTTP security headers (HSTS, CSP, X-Frame-Options). Get a 0-100 score, A-F grade and fixes.

User avatar

Bader Aloqily

2

PS

Public Security Headers & Cookie Surface Audit Agent

jacksu/public-security-headers-audit-agent

Audit public HTTP response security headers, HTTPS redirect behavior, and cookie attribute exposure without scanning, attacking, or storing cookie values.

User avatar

jack su

2

Website Security Headers & TLS Audit avatar

Website Security Headers & TLS Audit

helveticlabs/security-audit

Grade any website's security from A+ to F: HTTPS redirect, HSTS, CSP, clickjacking protection, cookie flags, TLS certificate expiry, security.txt and e-mail spoofing protection (SPF, DMARC). Passive and polite.

User avatar

Helvetic Labs

2

DS

Domain Security Audit: SPF, DMARC, DKIM, TLS & Headers

fluted_mirror/domain-security-audit

Grade any list of domains A-F: SPF, DMARC, DKIM, MX, CAA, TLS certificate expiry, HTTPS redirect, security headers and security.txt. Public data only.

User avatar

Troy Daniels

2

Security Headers Checker API - HTTP Security Scanner avatar

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

User avatar

Ava Torres

8