CORS Policy Checker - Audit Access-Control-* headers

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

Audit HTTP caching response headers (Cache-Control, Expires, ETag, Last-Modified, Vary, Age). Optionally tests conditional revalidation using If-None-Match / If-Modified-Since. Useful for web performance tuning and debugging CDN/browser caching behavior.

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Fast HTML Fetcher

rixin/fast-html-fetcher

From $0.2/1k reqs. Fast HTTP fetcher that returns raw HTML content, HTTP status codes, and response headers for any URL. Supports custom headers, user agent, proxy, redirect control, and SSL bypass. Perfect for web monitoring, content extraction, and API testing.

Fetches URLs and validates the Cross-Origin-Opener-Policy (COOP) and COOP-Report-Only response headers. Flags missing/invalid/unsafe policies to help with cross-origin isolation hardening. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and analyzes the Permissions-Policy header (and legacy Feature-Policy). Flags missing headers, invalid syntax, and risky wildcard allowances for sensitive features like camera/microphone/geolocation. Outputs per-URL results plus SUMMARY and REPORT.

Fetches URLs and validates the Referrer-Policy response header. Flags missing or risky policies (e.g., unsafe-url) and optionally checks against an expected policy. Outputs per-URL results plus SUMMARY and REPORT.

Checks whether a URL serves compressed responses (br/gzip/deflate) and validates related headers such as Vary: Accept-Encoding for cache correctness. Outputs per-URL results plus SUMMARY and REPORT.

Network Security Scanner

dz_omar/network-security-scanner

The SSL Checker actor scans IPs or subnets for SSL certificate details using masscan. It retrieves response headers, titles, and redirected URLs for HTTP and HTTPS. Customize parameters and set result limits for efficient scanning

Check cookie policy data at scale with this powerful Apify actor. Extracts data, details & metadata with automatic pagination and proxy rotation. Perfect for market research, competitive intelligence, and data-driven decision making.