You can access the Security Headers Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {};
11
12// Run the Actor and wait for it to finish
13const run = await client.actor("gifted_wagon/security-headers-evidence-auditor").call(input);
14
15// Fetch and print Actor results from the run's dataset (if any)
16console.log('Results from dataset');
17console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
18const { items } = await client.dataset(run.defaultDatasetId).listItems();
19items.forEach((item) => {
20    console.dir(item);
21});
22
23// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

HTTP Security Headers Scanner and Grader API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security Headers Scanner API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security Headers Scanner API in Python

Security Headers Scanner API through CLI

Security Headers Scanner OpenAPI definition

Security Headers Scanner API

HTTP Security Headers Auditor

junipr/http-security-headers-auditor

Audit public URLs or supplied header snapshots for security-relevant HTTP response headers and weak values.

junipr

HTTP Headers Inspector - All Response Headers & Security

ninhothedev/http-headers-inspector

$0.5/1K 🔥 HTTP headers inspector! All response headers, server, cache, CDN & security headers for any URL. No key. JSON, CSV, Excel or API in seconds. Debug & audit any site ⚡

ninhothedev

HTTP Headers Checker - Security Header Audit

benthepythondev/http-headers-checker

Check HTTP response headers for websites, including status code, server, cache settings, redirects and common security headers.

Ben

Bulk HTTP Header Checker — Security & Response Analysis

perryay/bulk-http-header-checker

Check HTTP response headers for multiple URLs in batch. Analyzes security headers (CSP, HSTS, XFO), redirect chains, response times, and server info.

Perry AY

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Security Headers Scanner

mahogany_songbird/security-headers-scanner

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Britton Furness

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

Techionik

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Sanskar Jaiswal

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

HTTP Headers Inspector - Full Headers + Security Grade

eliai/http-headers-inspector

Fetch every HTTP response header of any URL, plus a security-header analysis (HSTS, CSP, X-Frame-Options) with an A-F grade and server fingerprint. Single or bulk. $0.0004 per URL, cheaper than every paid headers actor measured; failed fetches are free.