Pricing

from $6.50 / 1,000 snapshot compareds

Go to Apify Store

HTTP Header Diff Monitor

Try for free

Compare previous/current HTTP headers and show exact added/removed/changed security/cache/CORS headers.

Pricing

from $6.50 / 1,000 snapshot compareds

Rating

0.0

(0)

Developer

junipr

Actor stats

Bookmarked

Total users

Monthly active users

18 days ago

Last modified

Inputs

inputItems
maxChanges
includeUnchanged
includeReport
maxChargeUsd

{
  "inputItems": [
    {
      "url": "https://www.iana.org",
      "oldHeaders": {
        "server": "cloudflare",
        "x-frame-options": "DENY",
        "cache-control": "public, max-age=3600",
        "content-security-policy": "upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com"
      },
      "newHeaders": {
        "server": "cloudflare",
        "x-frame-options": "DENY",
        "cache-control": "public, max-age=3600",
        "content-security-policy": "upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com",
        "strict-transport-security": "max-age=48211200; preload"
      }
    }
  ],
  "maxChanges": 2,
  "includeUnchanged": false,
  "includeReport": true,
  "maxChargeUsd": 1
}

The bundled exact input compares public HTTP and HTTPS response-header observations for IANA captured at 2026-07-12T05:03:20Z; it demonstrates the HSTS header added on the HTTPS response.

Dataset

The actor emits structured, actor-specific evidence rows. Empty source input, or a comparison with no selected changes, produces no dataset rows.

Billing

This actor uses pay-per-event billing with platform usage included in the configured event prices. Configured events are:

actor-start
snapshot-compared
change-detected
digest-generated
executive-report-generated

Every dataset row and report artifact is charge-gated. A zero-dollar cap stops before work with no paid output.

Use Cases

Detect HSTS header removal
Detect CSP header addition
Compare Cache-Control values
Detect a Server header change
Export a security header diff

Limitations

The actor compares supplied snapshots and does not fetch URLs or schedule monitoring. Header names are normalized case-insensitively; semantic equivalence inside complex header values is not inferred.

HTTP Headers Checker - Security Header Audit

benthepythondev/http-headers-checker

Check HTTP response headers for websites, including status code, server, cache settings, redirects and common security headers.

Ben

HTTP Headers Inspector - All Response Headers & Security

ninhothedev/http-headers-inspector

$0.5/1K 🔥 HTTP headers inspector! All response headers, server, cache, CDN & security headers for any URL. No key. JSON, CSV, Excel or API in seconds. Debug & audit any site ⚡

ninhothedev

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

Techionik

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Sanskar Jaiswal

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

HTTP Security Headers Analyzer

perryay/http-security-headers-analyzer

Audit web security headers against OWASP standards. Score pages (A-F) for HSTS, CSP, X-Frame-Options, CORS, and 12+ critical security headers with per-header severity analysis, policy compliance (PCI-DSS/SOC 2/ISO 27001/NIST), and actionable remediation guidance.

Perry AY

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.