Pricing

from $10.00 / 1,000 domain auditeds

Website Security Headers & TLS Audit

Grade any website's security from A+ to F: HTTPS redirect, HSTS, CSP, clickjacking protection, cookie flags, TLS certificate expiry, security.txt and e-mail spoofing protection (SPF, DMARC). Passive and polite.

Pricing

from $10.00 / 1,000 domain auditeds

Rating

0.0

(0)

Developer

Helvetic Labs

Actor stats

Bookmarked

Total users

Monthly active users

6 days ago

Last modified

HTTP Probe -- TLS, Security Headers, Redirects

jungle_synthesizer/ssl-security-headers-checker

Bulk site-health probe: TLS certificate, security-header grading (CSP, HSTS, X-Frame-Options, Permissions-Policy + 5 others, A/B/C/D/F grade), redirect chain, TTFB, HTTP/2 + HTTP/3, IPv6 reachability. Built for devops, security, and CI pipelines.

BowTiedRaccoon

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

Security Headers & TLS Checker - A-F Grade

psx/security-headers-tls-audit

Passive bulk check of HSTS, CSP, cookie flags, HTTPS redirect, TLS versions and certificate expiry. A-F grade with prioritised fix recommendations.

psx

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Sanskar Jaiswal

GuardHawk — Domain Security Audit: SSL, DNS, Takeover Risk

inexhaustible_glass/domain-health-audit

Full domain security audit in one call: SSL/TLS, DNS, SPF/DKIM/DMARC, security headers, WHOIS, blacklist, tech stack — PLUS subdomain-takeover risk and public S3-bucket exposure detection, which no other domain-audit tool checks. Returns a 0-100 health score + fix list. No API key, no login.

Hitman studio

5.0

(1)

Security Headers Scanner

pattonholdings/security-headers-scanner

Scan HTTP security headers for any URL. Returns A+ to F grade, per-header pass/weak/missing status (CSP, HSTS, X-Frame-Options), and Nginx/Apache/Express/Cloudflare fix snippets. Use for security audits, compliance checks, vendor review. Input: url or urls[]. Output: JSON grade report.

Coleton Patton

Bulk MTA-STS & TLS-RPT Checker

bene123/email-transport-security-auditor

Audit up to 1,000 public domains for MTA-STS policy reachability, MX coverage, TLS-RPT, DMARC enforcement, SPF record count, MX, and BIMI readiness.

Ben E

Passive HTTP Security Header Evidence API

soilair/passive-http-security-header-evidence-api

Observe selected HTTP security headers, HSTS values and declared CSP directives with source evidence. Passive requests only; no vulnerability or safety claims.

Salih Can Kurnaz

PWA Audit

pattonholdings/pwa-audit

Check if a URL is installable as a Progressive Web App: manifest validity, icons, service worker, HTTPS. Returns 13-point checklist, isInstallable flag, A-F grade. Use for PWA debugging, install-banner troubleshooting, migration QA. Input: url or urls[]. Output: JSON checklist.

Coleton Patton

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.