Pricing

$5.00 / 1,000 completed checks

Try for free

Go to Apify Store

Security Headers Auditor | HTTP Policy Inventory

Try for free

Inspect public HTTP response headers for CSP, HSTS, framing controls, content-type protection, referrer and permissions policies, and cross-origin isolation. Return raw policy values and concrete review observations for recurring website checks.

Pricing

$5.00 / 1,000 completed checks

Rating

0.0

(0)

Developer

Austin Aryain

Actor stats

Bookmarked

Total users

Monthly active users

4 days ago

Last modified

Categories

You can access the Security Headers Auditor | HTTP Policy Inventory programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "urls": ["https://example.com/"] }
9
10# Run the Actor and wait for it to finish
11run = client.actor("sbio-apps/security-headers-auditor").call(run_input=run_input)
12
13# Fetch and print Actor results from the run's dataset (if there are any)
14print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
15for item in client.dataset(run.default_dataset_id).iterate_items():
16    print(item)
17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Security Headers Auditor | HTTP Policy Inventory API in Python

The Apify API client for Python is the official library that allows you to use Security Headers Auditor | HTTP Policy Inventory API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Security Headers Auditor | HTTP Policy Inventory API in JavaScript

Security Headers Auditor | HTTP Policy Inventory API through CLI

Security Headers Auditor | HTTP Policy Inventory OpenAPI definition

Security Headers Auditor | HTTP Policy Inventory API

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

HTTP Security Headers Auditor

second_coming/http-headers-auditor

Bulk-check URLs for HTTP security headers. Grades sites A+ through F based on HSTS, CSP, XFO, XCTO, Referrer-Policy, and Permissions-Policy presence.

Richard P

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

Website Security Headers & HTTPS Audit

moonweil/website-security-audit

Crawl your website for missing or weak security headers (HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection), insecure cookies, mixed content, and HTTP-to-HTTPS gaps. Passive and safe: only reads responses, never probes. Per-page score plus site summary.

Aleksandr Jelohhin

HTTP Security Headers & OWASP Posture Auditor

gp005/security-headers-auditor

Audit HTTP security response headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP) for any URL. Returns a 0-100 grade, letter rating, and a prioritized fix list with exact header values to add. Single polite GET per URL, no crawling.

Geo

Security Headers Validator

stellar_ballet_0bu/security-headers-validator

Validate security response headers on any public URL: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Per-Header pass/warn/fail with documented fix-hints.

Nikita S

Security Headers Checker — HSTS, CSP & Header Grade

accountable_eel/security-headers-lookup

Check any website's security-relevant HTTP response headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and more) and get an A-F letter grade in one request. No key, no browser, just the live headers a browser would see.

Adrian Voss