Website Security Headers Scanner (Grade, HSTS, CSP, Cookies)

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

$1/1K 🔥 Fast HTTP security headers checker! HSTS, CSP, X-Frame & a grade for any URL. No key. JSON, CSV, Excel or API in seconds. Paste URLs & audit thousands of sites for security & compliance ⚡

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Full website health audit in one call: SEO, security headers, social tags, crawlability, and tech stack, scored into an A–F grade with one prioritized issue list. $0.05 per site audited. No API key.

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

NF Vulnerability Scanner — All-in-One Website Security Audit

nativefoundation-inc/vuln-scan-actor

The most comprehensive all-in-one website vulnerability scanner on Apify. Multi-engine security testing — active scanning, CVE detection, server misconfig checks, plus SPF/DMARC email-spoofing checks and leaked-secret scanning. Structured JSON report with severities and priority grades.

DMARC & Email Security Checker

taroyamada/dns-dmarc-security-checker

Validate domain infrastructure in bulk to boost email deliverability. Extract DMARC policies, SPF records, and MX configurations to keep outreach out of spam.

Detect 130+ web technologies, Shopify apps, WordPress plugins with versions, the ads.txt ad stack, and an A-F security header grade. Re-run on a schedule for install, migration and posture-drift alerts.

Scan HTTP security headers for any URL. Returns A+ to F grade, per-header pass/weak/missing status (CSP, HSTS, X-Frame-Options), and Nginx/Apache/Express/Cloudflare fix snippets. Use for security audits, compliance checks, vendor review. Input: url or urls[]. Output: JSON grade report.

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.