HTTP Security Headers Auditor
Pricing
from $4.90 / 1,000 http security headers auditor url auditeds
Audit public URLs or supplied header snapshots for security-relevant HTTP response headers and weak values.
You can access the HTTP Security Headers Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
{ "openapi": "3.0.1", "info": { "version": "1.0", "x-build-id": "2lqVCc1mhjlIoOjFd" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/junipr~http-security-headers-auditor/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-junipr-http-security-headers-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/junipr~http-security-headers-auditor/runs": { "post": { "operationId": "runs-sync-junipr-http-security-headers-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/junipr~http-security-headers-auditor/run-sync": { "post": { "operationId": "run-sync-junipr-http-security-headers-auditor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "urls": { "title": "Urls", "type": "array", "description": "urls used by HTTP Security Headers Auditor.", "items": { "type": "string" }, "default": [ "https://www.wikipedia.org" ] }, "sitemapUrls": { "title": "Sitemap Urls", "type": "array", "description": "sitemapUrls used by HTTP Security Headers Auditor.", "items": { "type": "string" }, "default": [] }, "headerInputs": { "title": "Header Inputs", "type": "array", "description": "Offline header captures to audit without fetching live URLs.", "items": { "type": "object", "additionalProperties": true, "properties": { "resourceUrl": { "title": "Resource URL", "type": "string", "description": "URL the headers were captured from." }, "url": { "title": "URL", "type": "string", "description": "Alternate URL field accepted by the actor." }, "finalUrl": { "title": "Final URL", "type": "string", "description": "Final URL after redirects, when known." }, "statusCode": { "title": "Status code", "type": "number", "description": "HTTP status code for the response." }, "headers": { "title": "Headers", "type": "object", "description": "HTTP response headers keyed by header name.", "additionalProperties": true } } }, "default": [] }, "allowedDomains": { "title": "Allowed Domains", "type": "array", "description": "allowedDomains used by HTTP Security Headers Auditor.", "items": { "type": "string" }, "default": [] }, "maxUrls": { "title": "Max Urls", "minimum": 0, "maximum": 1000000, "type": "number", "description": "Numeric limit for HTTP Security Headers Auditor.", "default": 25 }, "useHeadRequests": { "title": "Use Head Requests", "type": "boolean", "description": "Enable useHeadRequests behavior.", "default": true }, "getFallback": { "title": "Get Fallback", "type": "boolean", "description": "Enable getFallback behavior.", "default": true }, "securityProfile": { "title": "Security Profile", "type": "object", "description": "Optional profile settings for HTTP Security Headers Auditor.", "default": {}, "additionalProperties": true }, "includeRedirectSummary": { "title": "Include Redirect Summary", "type": "boolean", "description": "Enable includeRedirectSummary behavior.", "default": true }, "includeHeaderEvidence": { "title": "Include Header Evidence", "type": "boolean", "description": "Enable includeHeaderEvidence behavior.", "default": true }, "requestDelayMs": { "title": "Request Delay Ms", "minimum": 0, "maximum": 1000000, "type": "number", "description": "Numeric limit for HTTP Security Headers Auditor.", "default": 0 }, "timeoutMs": { "title": "Timeout Ms", "minimum": 0, "maximum": 1000000, "type": "number", "description": "Numeric limit for HTTP Security Headers Auditor.", "default": 10000 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } }}OpenAPI is a standard for designing and describing RESTful APIs, allowing developers to define API structure, endpoints, and data formats in a machine-readable way. It simplifies API development, integration, and documentation.
OpenAPI is effective when used with AI agents and GPTs by standardizing how these systems interact with various APIs, for reliable integrations and efficient communication.
By defining machine-readable API specifications, OpenAPI allows AI models like GPTs to understand and use varied data sources, improving accuracy. This accelerates development, reduces errors, and provides context-aware responses, making OpenAPI a core component for AI applications.
You can download the OpenAPI definitions for HTTP Security Headers Auditor from the options below:
If you’d like to learn more about how OpenAPI powers GPTs, read our blog post.
You can also check out our other API clients: