Security headers audit for a whole website

Created by

Aleksandr Jelohhin

Actor

Security Headers Checker: HSTS, CSP, Cookies & HTTPS

Crawl a website and audit every page's security headers (HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection), cookie flags, mixed content and the HTTP-to-HTTPS redirect. Passive: it only reads responses. The sample crawls 50 pages.

Try for free

Security Headers Checker: HSTS, CSP, Cookies & HTTPSmoonweil/website-security-audit

URL

Scheme

Score

Warnings

Input

Start URLs(required)

url:https://apify.com

Crawl the website:true

Max pages:50

Check HTTP -> HTTPS redirect:true

Minimum acceptable HSTS max-age (days):180

Output detail:detailed

Output fields

URL

Scheme

Score

Warnings

How it works

Sign up on Apify or log in

The Security Headers Checker: HSTS, CSP, Cookies & HTTPS Actor is ready to run with the inputs already set for "Security headers audit for a whole website". Sign up or log in and you'll land in Apify Console with a copy of this exact task.

Start the "Security headers audit for a whole website" task

The Security Headers Checker: HSTS, CSP, Cookies & HTTPS Actor will start running based on the input automatically. You can also change all the input fields, like start urls, crawl the website, and more, to match your specific use case.

Receive the "Security headers audit for a whole website" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as URL, scheme, score, and more.

Integrate into your workflow

The final output is delivered in JSON, CSV, or Excel format, ready to be plugged into your workflow. You can also run the "Security headers audit for a whole website" task via API.