Pricing

from $4.90 / 1,000 page auditeds

Go to Apify Store

CSP Header Analyzer

Try for free

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

Pricing

from $4.90 / 1,000 page auditeds

Rating

0.0

(0)

Developer

junipr

Actor stats

Bookmarked

Total users

Monthly active users

10 days ago

Last modified

Categories

Developer tools

Header observations

inputItems

Optional

URLs with observed status and headers.

Type:object[]

Default:

[
  {
    "url": "https://www.iana.org",
    "statusCode": 200,
    "headers": {
      "content-security-policy": "upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com"
    }
  }
]

Maximum directives

maxDirectives

Optional

Hard cap for paid CSP directive rows.

Type:integer

Minimum:1

Maximum:5000

Default:3

Include report

includeReport

Optional

Create charged Markdown and JSON report artifacts.

Type:boolean

Default:true

Maximum charge USD

maxChargeUsd

Optional

Stop before an event would exceed this run budget.

Type:number

Minimum:0

Maximum:100

Default:1

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

HTTP Security Headers Analyzer — CSP, HSTS Grader

technicaldost/http-security-headers

Technical Dost Solutions

CSP Analyzer 🛡️

perryay/csp-analyzer

Analyze Content-Security-Policy headers for URLs. Separates enforced vs report-only policies, detects weak configs, bypass patterns, missing protections. Premium: weak CSP alerts.

Perry AY

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and a security grade. Pay per result â€” cost is bounded by the URLs you submit.