# Changelog of HTTP Security Headers Analyzer (`perryay/http-security-headers-analyzer`) Actor

- **URL**: https://apify.com/perryay/http-security-headers-analyzer/changelog.md
- **Full Actor documentation**: https://apify.com/perryay/http-security-headers-analyzer.md

#### 2.0.0

- Expanded to 16 security header checks (added Cache-Control, Pragma, Expires, Server info disclosure)
- Deep header analysis: HSTS max-age validation, CSP dangerous-directive detection, CORS wildcard/misconfiguration checks
- Policy compliance framework: PCI-DSS v4.0, SOC 2, ISO 27001, NIST SP 800-53 mappings
- Multi-mode operations: analyze, scorecard, batch, remediation
- Concurrent batch scanning with configurable concurrency and retry logic
- Human-readable text report generation
- Aggregated batch statistics with grade distribution and best/worst performers
- OWASP weighted scoring with A-F letter grades
- 4 premium charge events: apify-actor-start, scorecard, batch-check, remediation
- Input validation, URL normalization, and comprehensive error handling

#### 1.0.0

- Initial release with 12 header checks
- Basic OWASP scoring with A-F grades
- Single URL and batch mode analysis
- Remediation guidance per header