Pricing

from $4.00 / 1,000 sites

Try for free

Go to Apify Store

Website Security Audit: SSL, Headers, Email DNS & Exposure

Try for free

Bulk passive security audit of your websites: SSL/TLS, HTTP security headers (A–F), SPF/DMARC, HTTP health, security.txt, and exposed .env/.git checks. 0–100 score + fixes. $4 per 1,000 sites. Authorized sites only.

Pricing

from $4.00 / 1,000 sites

Rating

0.0

(0)

Developer

Andrew Shamah

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Website Security Audit | SSL, Headers, DMARC & Exposure API

Below, you can find a list of relevant HTTP API endpoints for calling the Website Security Audit: SSL, Headers, Email DNS & Exposure Actor. For this, you’ll need an Apify account. Replace <YOUR_API_TOKEN> in the URLs with your Apify API token, which you can find under API & Integrations in Apify Console. For details, see the API reference.

Run Actor

POST
https://api.apify.com/v2/actors/dataforgehq~website-security-audit/runs?token=<YOUR_API_TOKEN>

Note: By adding the method=POST query parameter, this API endpoint can be called using a GET request and thus used in third-party webhooks. Please refer to our Run Actor API documentation.

Run Actor synchronously and get dataset items

POST
https://api.apify.com/v2/actors/dataforgehq~website-security-audit/run-sync-get-dataset-items?token=<YOUR_API_TOKEN>

Note: This endpoint supports both POST and GET request methods. However, only the POST method allows you to pass input data. For more information, please refer to our Run Actor synchronously and get dataset items API documentation.

Get Actor

GET
https://api.apify.com/v2/actors/dataforgehq~website-security-audit?token=<YOUR_API_TOKEN>

For more information, please refer to our Get Actor API documentation.

Actors can be used to scrape web pages, extract data, or automate browser tasks. Use the Website Security Audit: SSL, Headers, Email DNS & Exposure API programmatically via the Apify API.

You can choose from:

Website Security Audit: SSL, Headers, Email DNS & Exposure API in Python

Website Security Audit: SSL, Headers, Email DNS & Exposure API in JavaScript

Website Security Audit: SSL, Headers, Email DNS & Exposure API through CLI

Website Security Audit: SSL, Headers, Email DNS & Exposure OpenAPI definition

You can start Website Security Audit: SSL, Headers, Email DNS & Exposure with the Apify API by sending an HTTP POST request to the Run Actorendpoint. An Actor’s input and its content type can be passed as a payload of the POST request, and additional options can be specified using URL query parameters. The Website Security Audit: SSL, Headers, Email DNS & Exposure is identified within the API by its ID, which is the creator’s username and the name of the Actor.

When the Website Security Audit: SSL, Headers, Email DNS & Exposure run finishes you can list the data from its default dataset(storage) via the API or you can preview the data directly on Apify Console.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

Website Audit Orchestrator

constant_quadruped/website-audit-orchestrator

One-click comprehensive website audit. Combines Site Health Scanner (broken links, redirects, errors) with Lighthouse Auditor (performance, accessibility, SEO, best practices). Generates unified HTML report with overall health score and prioritized issues.

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.004 per URL plus $0.001 per run.

Hojun Lee

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

Techionik

SSL & Security Headers Audit: TLS cert, HSTS, CSP, grade

sea_sorghum/ssl-security-headers-audit

Bulk-audit TLS certificate (issuer, expiry, protocol, chain) and HTTP security headers (HSTS, CSP, X-Frame-Options). Get a 0-100 score, A-F grade and fixes.

Bader Aloqily

Public Security Headers & Cookie Surface Audit Agent

jacksu/public-security-headers-audit-agent

Audit public HTTP response security headers, HTTPS redirect behavior, and cookie attribute exposure without scanning, attacking, or storing cookie values.

jack su

Website Security Headers & TLS Audit

helveticlabs/security-audit

Grade any website's security from A+ to F: HTTPS redirect, HSTS, CSP, clickjacking protection, cookie flags, TLS certificate expiry, security.txt and e-mail spoofing protection (SPF, DMARC). Passive and polite.

Helvetic Labs

Domain Security Audit: SPF, DMARC, DKIM, TLS & Headers

fluted_mirror/domain-security-audit

Grade any list of domains A-F: SPF, DMARC, DKIM, MX, CAA, TLS certificate expiry, HTTPS redirect, security headers and security.txt. Public data only.

Troy Daniels

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.