Security Headers Checker avatar

Security Headers Checker

Pricing

$5.00 / 1,000 results

Go to Apify Store
Security Headers Checker

Security Headers Checker

Audit HTTP security headers (HSTS, CSP, X-Frame-Options, cookies, version leaks). Score 0-100 and a concrete fix for every issue.

Pricing

$5.00 / 1,000 results

Rating

0.0

(0)

Developer

FluxLab

FluxLab

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

10 days ago

Last modified

Share

Audit the HTTP security headers of any website and get a score with a concrete fix for every problem.

What it checks

  • HTTPS availability and http to https redirect
  • Strict-Transport-Security (presence, max-age)
  • Content-Security-Policy (presence, unsafe-inline in script-src)
  • Clickjacking protection (X-Frame-Options or CSP frame-ancestors)
  • X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Cross-Origin-Opener-Policy
  • Cookie flags (Secure, HttpOnly, SameSite)
  • Version leaks in Server, X-Powered-By, X-AspNet-Version
  • Score 0-100 and issues[] with level (fail, warn, info) and fix

Input

A list of domains (example.com). Up to 100 per run by default.

Output (one record per domain)

domain, status, url, http_status, hsts, csp, x_frame_options, http_redirects_to_https, version_leaks, cookies_checked, issues[], score. Download as JSON, CSV or Excel, or call via API.

Use cases

  • Pre-launch and pen-test preparation checks
  • Agency audits of client sites
  • Scheduled monitoring of many domains

Pricing

Pay per result (one domain = one result). Only the home page is requested, once per domain.

More tools by FluxLab

Built by FluxLab. Questions or a missing feature? Open an issue on the Actor page.