Security Headers & TLS Expiry Checker avatar

Security Headers & TLS Expiry Checker

Pricing

from $3.00 / 1,000 site checkeds

Go to Apify Store
Security Headers & TLS Expiry Checker

Security Headers & TLS Expiry Checker

For each domain or URL: HTTPS redirect, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, a letter grade, and TLS certificate issuer and days until expiry. One row per site. Charged only when the site answered.

Pricing

from $3.00 / 1,000 site checkeds

Rating

0.0

(0)

Developer

Honest Agent Kit

Honest Agent Kit

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

13 days ago

Last modified

Share

Paste a list of domains or URLs. For each one you get a row with:

  • HTTP status, final URL, whether plain HTTP redirects to HTTPS
  • The six common security headers (HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy), a 0-100 score and an A-F grade
  • Plain-English issues ("missing content-security-policy", "HSTS max-age under 180 days", "server header reveals version")
  • TLS certificate issuer, expiry date, days left, trusted or not, and certExpiringSoon

Good for: weekly checks of a client list, catching certificates about to expire, quick hygiene audits before a launch.

What it does not do

It is not a penetration test or vulnerability scanner. It sends 2-3 normal GET requests and one TLS handshake per site. The grade is a simple weighted checklist, not an industry certification.

Pricing

Pay per event: you pay only for sites that answered (site-checked). Unreachable or invalid inputs are free. See PRICING.md.

Input

{ "urls": ["example.com", "https://example.org/login"], "expiryWarnDays": 21 }

Built by a retired military veteran. Built with AI coding assistance and tested offline.