Pricing

$5.00 / 1,000 results

Try for free

Go to Apify Store

Security Headers Checker

Try for free

Audit HTTP security headers (HSTS, CSP, X-Frame-Options, cookies, version leaks). Score 0-100 and a concrete fix for every issue.

Pricing

$5.00 / 1,000 results

Rating

0.0

(0)

Developer

FluxLab

Actor stats

Bookmarked

Total users

Monthly active users

14 days ago

Last modified

What it checks

HTTPS availability and http to https redirect
Strict-Transport-Security (presence, max-age)
Content-Security-Policy (presence, unsafe-inline in script-src)
Clickjacking protection (X-Frame-Options or CSP frame-ancestors)
X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy
Cookie flags (Secure, HttpOnly, SameSite)
Version leaks in Server, X-Powered-By, X-AspNet-Version
Score 0-100 and issues[] with level (fail, warn, info) and fix

Input

A list of domains (example.com). Up to 100 per run by default.

Output (one record per domain)

domain, status, url, http_status, hsts, csp, x_frame_options, http_redirects_to_https, version_leaks, cookies_checked, issues[], score. Download as JSON, CSV or Excel, or call via API.

Use cases

Pre-launch and pen-test preparation checks
Agency audits of client sites
Scheduled monitoring of many domains

Pricing

Pay per result (one domain = one result). Only the home page is requested, once per domain.

More tools by FluxLab

Need these issues fixed for you? FluxLab does website audits and fixes. Built by FluxLab. Questions or a missing feature? Open an issue on the Actor page.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

Website HTTPS & SSL Health Checker

pillowy_travel/website-https-ssl-health-checker

Checks HTTPS availability and SSL certificate health for given URLs

SAHIL KUMAR

5.0

(2)

Website Health Report

automation-lab/website-health-report

Comprehensive website health audit in a single run. Checks HTTP status, SSL certificate, DNS resolution, security headers, meta tags, response time, and robots.txt. Returns a unified health score (0-100) with per-category grades.

Automation Lab

5.0

(1)

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Cookie Consent Checker

pillowy_travel/cookie-consent-checker

Checks whether a website displays a cookie consent banner and basic GDPR compliance signals.

SAHIL KUMAR

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

Bulk security headers scanner: grade any URL A-F on HSTS, CSP, X-Frame-Options & 3 more headers, list missing ones and server leaks. For security audits, agencies and compliance.

ninhothedev

HTTP Headers Checker - Security Header Audit

benthepythondev/http-headers-checker

Check HTTP response headers for websites, including status code, server, cache settings, redirects and common security headers.

Ben

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

Security Headers Scanner

mahogany_songbird/security-headers-scanner

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Britton Furness

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.