Pricing

from $2.80 / 1,000 page auditeds

Try for free

Go to Apify Store

Content Security Policy Evidence Auditor

Try for free

Parse enforced and report-only Content-Security-Policy from response headers and HTML metadata into normalized directive and risk evidence.

Pricing

from $2.80 / 1,000 page auditeds

Rating

0.0

(0)

Developer

Michael Olmos

Actor stats

Bookmarked

Total users

Monthly active users

6 days ago

Last modified

What is better

Enforced, report-only, and meta policies kept distinct.
Normalized directives and source tokens with exact evidence.
Nonce, hash, wildcard, unsafe-inline, unsafe-eval, mixed-scheme, and missing-fallback findings.
Deterministic grading without claiming penetration testing.
Bounded SSRF-safe public fetching.
Inputs, redirects, response bytes, and timeouts are bounded; memory is locked to 256 MB.

Charging

PAY_PER_EVENT uses a one-time Actor-start event plus page-audited. Only successful completed evidence rows are charged. Invalid inputs, network or protocol failures, and the OUTPUT summary are not charged.

Example input

{
  "pages": [
    "https://github.com/"
  ],
  "maxPages": 1,
  "timeoutSecs": 20
}

Output

The default dataset contains normalized evidence rows. The OUTPUT record reports submitted, unique, attempted, completed, failed, input-limited, and budget-limited counts without hiding partial failures. Findings are static page evidence, not legal, security, SEO, performance, mobile-readiness, or accessibility certification.

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Content-Security-Policy Auditor

phoenix2810/csp-auditor

Deeply audit a public URL's Content-Security-Policy and Content-Security-Policy-Report-Only headers. Parses directives and sources, flags unsafe-inline, unsafe-eval, non-HTTPS sources, wildcards, missing default-src and frame-ancestors, nonces, hashes, and deprecated directives.

Sanskar Jaiswal

HTTP Security Headers Auditor

second_coming/http-headers-auditor

Bulk-check URLs for HTTP security headers. Grades sites A+ through F based on HSTS, CSP, XFO, XCTO, Referrer-Policy, and Permissions-Policy presence.

Richard P

Security.txt Checker — Security Contact Finder

q_services/security-txt-checker

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Q Services

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Permissions-Policy Auditor

phoenix2810/permissions-policy-auditor

Fetch one public URL and deeply audit its Permissions-Policy and legacy Feature-Policy headers. Parse feature directives, classify high-risk browser features, and get a readiness score.

Sanskar Jaiswal