Pricing

from $2.80 / 1,000 page auditeds

Try for free

Go to Apify Store

Content Security Policy Evidence Auditor

Try for free

Parse enforced and report-only Content-Security-Policy from response headers and HTML metadata into normalized directive and risk evidence.

Pricing

from $2.80 / 1,000 page auditeds

Rating

0.0

(0)

Developer

Michael Olmos

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

Configure MCP server with Content Security Policy Evidence Auditor

The configuration above connects to the hosted Apify MCP server with the Content Security Policy Evidence Auditor Actor already loaded. It uses OAuth, so your client opens a browser window to sign you in to Apify on first use. No API token is needed. Clients without OAuth support can authenticate with an Authorization: Bearer header carrying an API token from API & Integrations in Apify Console.

Get a ready-to-use configuration for your MCP client with the Content Security Policy Evidence Auditor Actor preconfigured at https://mcp.apify.com/?tools=fetch-actor-details,gifted_wagon/content-security-policy-evidence-auditor.

You can connect to the Apify MCP Server using clients like Tester MCP Client, or any other MCP client of your choice.

If you want to learn more about our Apify MCP implementation, check out our MCP documentation. To learn more about the Model Context Protocol in general, refer to the official MCP documentation or read our blog post.

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Content-Security-Policy Auditor

phoenix2810/csp-auditor

Deeply audit a public URL's Content-Security-Policy and Content-Security-Policy-Report-Only headers. Parses directives and sources, flags unsafe-inline, unsafe-eval, non-HTTPS sources, wildcards, missing default-src and frame-ancestors, nonces, hashes, and deprecated directives.

Sanskar Jaiswal

HTTP Security Headers Auditor

second_coming/http-headers-auditor

Bulk-check URLs for HTTP security headers. Grades sites A+ through F based on HSTS, CSP, XFO, XCTO, Referrer-Policy, and Permissions-Policy presence.

Richard P

Security.txt Checker — Security Contact Finder

q_services/security-txt-checker

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Q Services

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Permissions-Policy Auditor

phoenix2810/permissions-policy-auditor

Fetch one public URL and deeply audit its Permissions-Policy and legacy Feature-Policy headers. Parse feature directives, classify high-risk browser features, and get a readiness score.

Sanskar Jaiswal