Pricing

from $4.90 / 1,000 page auditeds

Go to Apify Store

CSP Header Analyzer

Try for free

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

Pricing

from $4.90 / 1,000 page auditeds

Rating

0.0

(0)

Developer

junipr

Actor stats

Bookmarked

Total users

Monthly active users

10 days ago

Last modified

Inputs

inputItems
maxDirectives
includeReport
maxChargeUsd

{
  "inputItems": [
    {
      "url": "https://www.iana.org",
      "statusCode": 200,
      "headers": {
        "content-security-policy": "upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com"
      }
    }
  ],
  "maxDirectives": 3,
  "includeReport": true,
  "maxChargeUsd": 1
}

The bundled exact input contains the public Content-Security-Policy response header observed at https://www.iana.org at 2026-07-12T05:03:20Z.

Dataset

The actor emits structured, actor-specific evidence rows. Empty source input, or a comparison with no selected changes, produces no dataset rows.

Billing

This actor uses pay-per-event billing with platform usage included in the configured event prices. Configured events are:

actor-start
page-audited
rule-parsed
finding-emitted
audit-report-generated

Every dataset row and report artifact is charge-gated. A zero-dollar cap stops before work with no paid output.

Use Cases

Find a missing CSP header
Flag unsafe-inline in a CSP
Flag unsafe-eval in a CSP
Review frame-ancestors controls
Export a restrictive CSP policy

Limitations

The actor evaluates supplied response headers and does not request pages. It flags common policy risks but does not prove browser-level exploitability or replace CSP deployment testing.

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

HTTP Security Headers Analyzer — CSP, HSTS Grader

technicaldost/http-security-headers

Technical Dost Solutions

CSP Analyzer 🛡️

perryay/csp-analyzer

Analyze Content-Security-Policy headers for URLs. Separates enforced vs report-only policies, detects weak configs, bypass patterns, missing protections. Premium: weak CSP alerts.

Perry AY

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and a security grade. Pay per result â€” cost is bounded by the URLs you submit.