You can access the Security Headers and TLS Check (grade A to F) programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "startUrls": [
12        {
13            "url": "https://example.com/"
14        }
15    ]
16};
17
18// Run the Actor and wait for it to finish
19const run = await client.actor("nitsuahlabs/security-headers-check").call(input);
20
21// Fetch and print Actor results from the run's dataset (if any)
22console.log('Results from dataset');
23console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
24const { items } = await client.dataset(run.defaultDatasetId).listItems();
25items.forEach((item) => {
26    console.dir(item);
27});
28
29// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Security Headers and TLS Check (grade A to F) API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security Headers and TLS Check (grade A to F) API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security Headers and TLS Check (grade A to F) API in Python

Security Headers and TLS Check (grade A to F) API through CLI

Security Headers and TLS Check (grade A to F) OpenAPI definition

Security Headers and TLS Check (grade A to F) API

Security Headers Scanner

mahogany_songbird/security-headers-scanner

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Britton Furness

Security Headers & TLS Checker - A-F Grade

psx/security-headers-tls-audit

Passive bulk check of HSTS, CSP, cookie flags, HTTPS redirect, TLS versions and certificate expiry. A-F grade with prioritised fix recommendations.

psx

Bulk Security Headers & SSL Expiry Checker

batreek/security-headers-ssl-audit

Check HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy...), SSL expiry, certificate issuer, HTTPS redirects and cookie flags for thousands of websites. Get an A-F grade and fixes per site.

Adam Abdou-Gustavson

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

Security Headers Scanner

gifted_wagon/security-headers-evidence-auditor

Grade HTTP defensive headers with exact response evidence, weak-value findings, redirect context, and safe fetching.

Michael Olmos

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

Crypto Token Security Check: Honeypot, Taxes and Owner Risk

scrapemint/crypto-token-security-check

Keyless contract safety checks for tokens on Ethereum, BNB Chain, Polygon, Base, Arbitrum, Optimism, Avalanche and Solana: honeypot and sell restrictions, buy and sell taxes, the powers the owner keeps, liquidity locks and holder concentration.

Ken M

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.