HTTP Security Headers Checker: Grade A–F + Issues avatar

HTTP Security Headers Checker: Grade A–F + Issues

Pricing

from $0.50 / 1,000 url gradeds

Go to Apify Store
HTTP Security Headers Checker: Grade A–F + Issues

HTTP Security Headers Checker: Grade A–F + Issues

Audit HTTP security headers of many URLs: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP, Server leak. Score A–F with issues list. $0.50 per 1,000 URLs; unreachable free.

Pricing

from $0.50 / 1,000 url gradeds

Rating

0.0

(0)

Developer

Andrew Shamah

Andrew Shamah

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

19 hours ago

Last modified

Security

Limited permissions

Share

HTTP Security Headers Checker – grade A–F for HSTS, CSP & more

Audit the HTTP security headers of many URLs in one run. Scores each site A–F based on HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener/Embedder-Policy, and Server header leakage.

Use cases

  • Agency / security audits of client sites
  • CI checks that staging still ships HSTS + CSP
  • Bulk inventory of header posture across a domain list

Input

{ "urls": ["https://apify.com", "https://example.com"] }

Output (one item per URL)

{
"url": "https://apify.com",
"grade": "B",
"score": 78,
"https": true,
"headers": { "strict-transport-security": "max-age=31536000; includeSubDomains", "content-security-policy": "…" },
"checks": { "hsts": true, "csp": true, "xFrameOptions": true, "xContentTypeOptions": true },
"issues": ["Missing Permissions-Policy", "Server header reveals software"]
}

Pricing

$0.0005 per URL graded ($0.50 per 1,000) + a tiny start fee. Unreachable hosts are free.