Pricing

from $4.90 / 1,000 url auditeds

Go to Apify Store

Security Headers Auditor

Try for free

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

Pricing

from $4.90 / 1,000 url auditeds

Rating

0.0

(0)

Developer

junipr

Actor stats

Bookmarked

Total users

Monthly active users

9 days ago

Last modified

Categories

Developer tools

Audit ID

auditId

Optional

Stable identifier for this security header audit row.

Type:string

Source Type

sourceType

Optional

Whether the target was supplied inline or fetched from a URL.

Type:string

Source ID

sourceId

Optional

User-provided or generated target identifier.

Type:string

Source URL

sourceUrl

Optional

Source URL when available.

Type:string | null

Status Code

statusCode

Optional

HTTP status code when available.

Type:number | null

Status

status

Optional

Overall audit status: pass, warn, or fail.

Type:string

Severity

severity

Optional

Highest issue severity for this target.

Type:string

Security Score

securityScore

Optional

0-100 security header score.

Type:number

Checked Headers

checkedHeaders

Optional

Header names included in the audit.

Type:array

Present Headers

presentHeaders

Optional

Headers present in the current snapshot.

Type:array

Missing Headers

missingHeaders

Optional

Required headers not present.

Type:array

Weak Headers

weakHeaders

Optional

Headers present but configured weakly.

Type:array

Critical Findings

criticalFindings

Optional

Critical missing or unsafe findings.

Type:array

Added Headers

addedHeaders

Optional

Headers added versus previousHeaders.

Type:array

Removed Headers

removedHeaders

Optional

Headers removed versus previousHeaders.

Type:array

Changed Headers

changedHeaders

Optional

Headers whose values changed versus previousHeaders.

Type:array

Has CSP

hasContentSecurityPolicy

Optional

Whether Content-Security-Policy is present.

Type:boolean

CSP Has Default Src

cspHasDefaultSrc

Optional

Whether CSP includes default-src.

Type:boolean

CSP Has Object Src None

cspHasObjectSrcNone

Optional

Whether CSP includes object-src 'none'.

Type:boolean

CSP Has Frame Ancestors

cspHasFrameAncestors

Optional

Whether CSP includes frame-ancestors.

Type:boolean

CSP Allows Unsafe Inline

cspAllowsUnsafeInline

Optional

Whether CSP includes unsafe-inline.

Type:boolean

CSP Allows Wildcard

cspAllowsWildcard

Optional

Whether CSP allows wildcard sources on major directives.

Type:boolean

Has HSTS

hasStrictTransportSecurity

Optional

Whether Strict-Transport-Security is present.

Type:boolean

HSTS Max Age Seconds

hstsMaxAgeSeconds

Optional

Parsed HSTS max-age value.

Type:number | null

HSTS Includes Subdomains

hstsIncludesSubdomains

Optional

Whether HSTS includes includeSubDomains.

Type:boolean

HSTS Preload

hstsPreload

Optional

Whether HSTS includes preload.

Type:boolean

Has X Frame Options

hasXFrameOptions

Optional

Whether X-Frame-Options is present.

Type:boolean

X Frame Options

xFrameOptions

Optional

X-Frame-Options value when present.

Type:string | null

Has NoSniff

hasXContentTypeOptionsNoSniff

Optional

Whether X-Content-Type-Options is nosniff.

Type:boolean

Referrer Policy

referrerPolicy

Optional

Referrer-Policy value when present.

Type:string | null

Permissions Policy

permissionsPolicy

Optional

Permissions-Policy value when present.

Type:string | null

Has COOP

hasCrossOriginOpenerPolicy

Optional

Whether Cross-Origin-Opener-Policy is present.

Type:boolean

Has CORP

hasCrossOriginResourcePolicy

Optional

Whether Cross-Origin-Resource-Policy is present.

Type:boolean

Cross-Origin Isolation Signals

crossOriginIsolationSignals

Optional

Cross-origin isolation-related headers present.

Type:array

Issue Count

issueCount

Optional

Number of issues found on this target.

Type:number

Issues

issues

Optional

Structured issue objects with code, severity, header, and message.

Type:array

Recommendation

recommendation

Optional

Recommended next action for this target.

Type:string

Checked At

checkedAt

Optional

ISO timestamp when this target was audited.

Type:string

Other properties may be included.

HTTP Security Headers Audit

mbeato/apimesh-security-headers

Audit 10 HTTP security headers with A+ to F grading. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and more.

Maximus Beato

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.

Manchitt Sanan

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

HTTP & Security Headers Auditor

bgfc97/http-security-headers-audit

Audit any list of URLs: status, final redirect, HTTPS, server, security headers (HSTS, CSP, X-Frame-Options...), a security score, page title and CMS/generator. No key, no proxy.