Cross-Origin-Opener-Policy (COOP) Header Checker

Pricing

Pay per usage

Cross-Origin-Opener-Policy (COOP) Header Checker

Fetches URLs and validates the Cross-Origin-Opener-Policy (COOP) and COOP-Report-Only response headers. Flags missing/invalid/unsafe policies to help with cross-origin isolation hardening. Outputs per-URL results plus SUMMARY and REPORT.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Bikram Adhikari

Maintained by Community

Actor stats

Bookmarked

Total users

Monthly active users

8 days ago

Last modified

	Free No discount	Starter Bronze discount	Scale Silver discount	Business Gold discount
Compute units (CU)	$0.30 / CU	$0.30 / CU	$0.25 / CU	$0.20 / CU
Actor RAM	8 GB	32 GB	128 GB	256 GB
Max concurrent runs	25	32	128	256
Rented Actors		Deducted from prepaid usage	Deducted from prepaid usage	Deducted from prepaid usage
Residential proxies	$8.00 / GB	$8.00 / GB	$7.50 / GB	$7.00 / GB
Datacenter proxies	5 IPs included	30 IPs included then $1.00 / IP	200 IPs included then $0.80 / IP	500 IPs included then $0.60 / IP
SERPs proxy	$2.50 / 1,000 SERPs	$2.50 / 1,000 SERPs	$2.00 / 1,000 SERPs	$1.70 / 1,000 SERPs

Pay per usage

This Actor is paid per platform usage. The Actor is free to use, and you only pay for the Apify platform usage, which gets cheaper the higher subscription plan you have. See our subscription plans.

Learn more

Referrer-Policy Header Checker

scrappy_garden/referrer-policy-header-checker

Fetches URLs and validates the Referrer-Policy response header. Flags missing or risky policies (e.g., unsafe-url) and optionally checks against an expected policy. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Permissions-Policy Header Checker

scrappy_garden/permissions-policy-header-checker

Fetches URLs and analyzes the Permissions-Policy header (and legacy Feature-Policy). Flags missing headers, invalid syntax, and risky wildcard allowances for sensitive features like camera/microphone/geolocation. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

X-Content-Type-Options Header Checker - nosniff audit

scrappy_garden/x-content-type-options-header-checker

Fetches URLs and validates the X-Content-Type-Options response header. Flags missing header and invalid values (expects nosniff) to help prevent MIME sniffing attacks. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

X-Frame-Options Header Checker - Prevent clickjacking

scrappy_garden/x-frame-options-header-checker

Fetches URLs and validates the X-Frame-Options response header (DENY/SAMEORIGIN). Flags missing/invalid/deprecated values and also detects CSP frame-ancestors. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

HSTS Header Checker - Strict-Transport-Security audit

scrappy_garden/hsts-header-checker

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

CORS Policy Checker - Audit Access-Control-* headers

scrappy_garden/cors-policy-checker

Check CORS response headers (Access-Control-Allow-Origin, -Credentials, -Methods, -Headers, -Expose-Headers, -Max-Age, Vary: Origin) for one or more URLs. Optionally performs a preflight OPTIONS check. Useful for debugging browser/API integrations and spotting risky CORS misconfigurations.

Bikram Adhikari

Content-Type Header Validator

scrappy_garden/content-type-header-validator

Fetches URLs and validates the Content-Type header (MIME type + optional charset). Flags missing/mismatched types and recommends X-Content-Type-Options: nosniff. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari

HTTP Compression Checker

scrappy_garden/http-compression-checker

Checks whether a URL serves compressed responses (br/gzip/deflate) and validates related headers such as Vary: Accept-Encoding for cache correctness. Outputs per-URL results plus SUMMARY and REPORT.

Bikram Adhikari