Pricing

Pay per usage

Security Headers Scanner

Grade any website's HTTP security headers — letter grade (A+ to F), severity breakdown, per-header pass/weak/missing status, and copy-paste config snippets for Nginx, Apache, Express, and Cloudflare. Port of the 33-user Chrome extension to a programmatic API.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Coleton Patton

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Categories

Developer tools

You can access the Security Headers Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "url": "https://example.com"
12};
13
14// Run the Actor and wait for it to finish
15const run = await client.actor("pattonholdings/security-headers-scanner").call(input);
16
17// Fetch and print Actor results from the run's dataset (if any)
18console.log('Results from dataset');
19console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
20const { items } = await client.dataset(run.defaultDatasetId).listItems();
21items.forEach((item) => {
22    console.dir(item);
23});
24
25// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Security Headers Scanner API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Security Headers Scanner API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Security Headers Scanner API in Python

Security Headers Scanner API through CLI

Security Headers Scanner OpenAPI definition

Security Headers Scanner API

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

CSS Variables Inspector

pattonholdings/css-variables-inspector

Extracts every CSS custom property (--var-name) declared or referenced on a webpage. Returns properties grouped by :root and other selectors, plus var() references with no matching declaration. For design-system audits, theme migrations, brand-token extraction.

Coleton Patton

Website Tech Stack Detector — 100+ Technologies

ryanclinton/website-tech-stack-detector

Identify the technologies, frameworks, and services running on any website. Website Tech Stack Detector crawls one or more URLs, inspects HTTP headers, HTML meta tags, script sources, and body content, then matches them against a fingerprint database of 106 web technologies across 17 categories.

Ryan Clinton

Bug Bounty Recon Scanner

iamuendo/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Isaac Muendo

Free Domain Technology Stack Scanner

s-r/free-domain-technology-stack-scanner

Detect the complete technology stack of any website. Identifies ecommerce platforms (Shopify, WooCommerce, Magento), CMS (WordPress, Contentful), JS frameworks (React, Next.js, Vue), analytics (GA4, GTM), payment providers (Stripe, PayPal, Klarna), hosting/CDN, SSL certificates.

GDPR & Privacy Cookie Scanner

andok/gdpr-cookie-scanner

Scan websites to identify tracking cookies and third-party scripts. Automate privacy compliance and GDPR audits.

Andok

SSL Cipher Suite & Security Scanner

andok/ssl-cipher-checker

Audit TLS versions and negotiated cipher suites for a list of domains to ensure compliance and robust web security.

Andok

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

Public Security Headers & Cookie Surface Audit Agent

jacksu/public-security-headers-audit-agent

Audit public HTTP response security headers, HTTPS redirect behavior, and cookie attribute exposure without scanning, attacking, or storing cookie values.

jack su

OSINT Website Intelligence Analyzer

onescales/website-intelligence-analyzer-osint

All-in-one website analysis tool. Run 30 OSINT checks on any URL — DNS, SSL, WHOIS, tech stack, security headers, email security, open ports, and more. Get a complete site profile in seconds.