Pricing

from $10.00 / 1,000 run starteds

Try for free

Go to Apify Store

Security Response Header Regression Gate

Try for free

Learn when a deploy, a CDN rule or a proxy change removes or weakens a security header on your production URLs. The Actor compares HSTS, CSP (each directive), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and the cross-origi

Pricing

from $10.00 / 1,000 run starteds

Rating

0.0

(0)

Developer

kingii98

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

You can access the Security Response Header Regression Gate programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "urls": [
12        "https://github.com/",
13        "https://www.mozilla.org/en-US/",
14        "https://www.gov.uk/"
15    ],
16    "required_headers": {
17        "strict-transport-security": {
18            "min_max_age": 31536000
19        },
20        "x-content-type-options": {
21            "allowed_values": [
22                "nosniff"
23            ]
24        }
25    },
26    "fail_on": "high",
27    "baseline_name": "",
28    "reset_baseline": false,
29    "alert_webhook_url": "",
30    "request_timeout_seconds": 15,
31    "concurrency": 10,
32    "max_redirects": 5,
33    "max_run_seconds": 240
34};
35
36// Run the Actor and wait for it to finish
37const run = await client.actor("kingii98/security-response-header-regression-gate").call(input);
38
39// Fetch and print Actor results from the run's dataset (if any)
40console.log('Results from dataset');
41console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
42const { items } = await client.dataset(run.defaultDatasetId).listItems();
43items.forEach((item) => {
44    console.dir(item);
45});
46
47// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Security Response Header Regression Gate API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security Response Header Regression Gate API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security Response Header Regression Gate API in Python

Security Response Header Regression Gate API through CLI

Security Response Header Regression Gate OpenAPI definition

Security Response Header Regression Gate API

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

Security Headers Lookup: HSTS, CSP & Header Grade API

accountable_eel/security-headers-lookup

Check any website's security-relevant HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and more) and get an A-F letter grade in one request. No key, no browser, just the live headers a browser would see.

Adrian Voss

HTTP Security Headers & OWASP Posture Auditor

gp005/security-headers-auditor

Audit HTTP security response headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP) for any URL. Returns a 0-100 grade, letter rating, and a prioritized fix list with exact header values to add. Single polite GET per URL, no crawling.

Geo

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Security Headers Checker - Grade CSP, HSTS, X-Frame-Options

eliai/security-headers-checker

Security headers checker for any URL: pass a list of URLs, get one JSON record per URL with the observed CSP, HSTS, X-Frame-Options and related headers, missing-header findings, and an A–F security grade. $0.02 per URL checked.