Website Security Headers Checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

Crawl a website (or list of pages) and detect broken links (404/500), unreachable URLs, and invalid asset references. Generates a structured report for SEO audits, QA testing, and website maintenance.

Complete website & domain audit in one run: SSL/TLS, DNS, SPF/DKIM/DMARC email security, security headers, tech stack, WHOIS, blacklist & uptime — with a health score and fix list. No API key.

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Monitor any website for changes automatically. Track content updates, price changes, product availability, news updates. Get instant alerts when pages change. Perfect for competitor monitoring, price tracking, content surveillance, and automated change detection. Export change history to JSON.

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and a security grade. Pay per result — cost is bounded by the URLs you submit.

Check SSL/TLS certificates for any website: expiration date, issuer, subject, hostname match (SNI), chain/authorization status, and common HTTPS misconfigurations. Useful for SEO audits, security checks, and uptime monitoring.

Check if a website has a valid favicon and icon setup for SEO and UX. Detects <link rel=icon> tags, default /favicon.ico, Apple touch icons, mask-icon, and web manifest icons. Validates URLs, HTTP status codes, content types, and reports missing/broken icons.