Pricing

from $14.00 / 1,000 url auditeds

Try for free

Go to Apify Store

HTTP Security Headers & OWASP Posture Auditor

Try for free

Security headers checker and OWASP posture auditor: scan CSP, HSTS, X-Frame-Options, COOP/COEP/CORP for any URL. Returns a 0-100 grade plus a prioritized fix list with exact header values to add. Bulk scan hundreds of URLs per run; JSON output via the Apify API.

Pricing

from $14.00 / 1,000 url auditeds

Rating

0.0

(0)

Developer

Geo

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Automation

You can access the HTTP Security Headers & OWASP Posture Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "urls": ["https://example.com"] }
9
10# Run the Actor and wait for it to finish
11run = client.actor("gp005/security-headers-auditor").call(run_input=run_input)
12
13# Fetch and print Actor results from the run's dataset (if there are any)
14print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
15for item in client.dataset(run.default_dataset_id).iterate_items():
16    print(item)
17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

HTTP Security Headers Checker: CSP, HSTS, OWASP API in Python

The Apify API client for Python is the official library that allows you to use HTTP Security Headers & OWASP Posture Auditor API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

HTTP Security Headers & OWASP Posture Auditor API in JavaScript

HTTP Security Headers & OWASP Posture Auditor API through CLI

HTTP Security Headers & OWASP Posture Auditor OpenAPI definition

HTTP Security Headers & OWASP Posture Auditor API

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.

Manchitt Sanan

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Checker: HSTS, CSP & Header Grade

accountable_eel/security-headers-lookup

Check any website's security-relevant HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and more) and get an A-F letter grade in one request. No key, no browser, just the live headers a browser would see.

Adrian Voss

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and an A–F security grade. $0.02 per URL checked.