SSL Certificate and Security Headers Checker API
Pricing
from $0.60 / 1,000 domain checkeds
Check the TLS certificate and the HTTP security headers of every domain in one run, with an A+ to F grade and the exact issues to fix. Expiry, chain trust, HSTS, CSP and more from one handshake and a few polite requests per domain. robots.txt obeyed, no personal data, pay only per domain.
expired, expiresSoon, selfSigned, trust of the chain with the reason, host name match, names, key type and size, signature algorithm, OCSP stapling, SHA-256 fingerprint), the value of each security header (HSTS with max-age, includeSubDomains and preload, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP, COEP, CORP, Server, X-Powered-By), whether http:// redirects to https://, and the list of missing headers.COVERAGE lists every domain that was not delivered (no TLS service, not found, error, not checked) and the rows delivered with the certificate only (tls_only: robots.txt disallows the home page, an anti-bot page answered, or an error). Domains without TLS, domains that do not exist, invalid and repeated entries and domains skipped by onlyNew are never charged.onlyNew and stateName (a domain is delivered again only when its certificate, its grade or its expiry state changed), end-of-run notification (notifyUrl, notifyWhenEmpty), charge cap respected, maxItems, stop with the summary saved 90 seconds before the run timeout, RUN_SUMMARY with the grade counts and the certificates that expire soon, one request per host and second by default (minimum 250 ms), four domains at a time, rows in the order of the list.