HTTP Security Headers Auditor

Store Positioning

Store title: HTTP Security Headers Auditor

Short description: Audit public URLs or supplied header snapshots for security-relevant HTTP response headers and weak values.

SEO title: HTTP Security Headers Auditor — technical SEO, web, and domain audit

SEO description: Audit public URLs or supplied header snapshots for security-relevant HTTP response headers and weak values. Use it to find crawlability, indexability, security, metadata, and page-quality issues with evidence-backed rows and audit reports.

Categories: SEO_TOOLS

Keywords: http, security, headers, auditor, public data, security headers, web/domain audit

Fixed-Inclusive PPE Pricing

This actor uses pay-per-event pricing. Event prices include Apify platform usage; users are not expected to pay a separate platform-usage pass-through charge for the configured pricing model.

• Tier: W1 — Web/domain audit
• Primary event: url-audited at $0.00490 base
• Default max charge: $10.00
• Store discounts: FREE/BRONZE base, SILVER discounted, GOLD deepest approved discount

Event set:

• actor-start: base $0.00500, GOLD $0.00400. HTTP Security Headers Auditor: charged when actor start is completed. The price includes Apify platform usage; no separate usage pass-through is intended.
• url-audited: base $0.00490, GOLD $0.00392. HTTP Security Headers Auditor: charged when url audited is completed. The price includes Apify platform usage; no separate usage pass-through is intended.
• rule-parsed: base $0.00372, GOLD $0.00298. HTTP Security Headers Auditor: charged when rule parsed is completed. The price includes Apify platform usage; no separate usage pass-through is intended.
• finding-emitted: base $0.00372, GOLD $0.00298. HTTP Security Headers Auditor: charged when finding emitted is completed. The price includes Apify platform usage; no separate usage pass-through is intended.
• audit-report-generated: base $0.05000, GOLD $0.04000. HTTP Security Headers Auditor: charged when audit report generated is completed. The price includes Apify platform usage; no separate usage pass-through is intended.

Public Task Concepts

• Audit HTTP Security Headers controls on a capped public sample
• Find high-priority HTTP Security Headers issues before release
• Validate HTTP Security Headers evidence from supplied pages
• Prioritize HTTP Security Headers fixes with severity and proof
• Export HTTP Security Headers QA rows for client review

Audit public URLs or supplied header snapshots for security-relevant HTTP response headers and weak values.

Inputs

• urls
• sitemapUrls
• headerInputs
• allowedDomains
• maxUrls
• useHeadRequests
• getFallback
• securityProfile
• includeRedirectSummary
• includeHeaderEvidence
• requestDelayMs
• timeoutMs

Output

Dataset rows include: resourceUrl, finalUrl, statusCode, https, strictTransportSecurity, contentSecurityPolicy, contentSecurityPolicyReportOnly, xFrameOptions, referrerPolicy, permissionsPolicy, xContentTypeOptions, crossOriginOpenerPolicy, crossOriginEmbedderPolicy, crossOriginResourcePolicy, headerName, headerValue, issueCode, severity, recommendation.

The checked-in output example is produced by the deterministic supplied-header input and is verified against the dataset schema in automated tests.