HSTS Header Checker - Strict-Transport-Security audit

Pricing

Pay per usage

HSTS Header Checker - Strict-Transport-Security audit

Fetches URLs and validates the Strict-Transport-Security (HSTS) response header. Parses directives (max-age/includeSubDomains/preload), flags missing/invalid configuration, and checks common best practices. Outputs per-URL results plus SUMMARY and REPORT.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Bikram Adhikari

Maintained by Community

Actor stats

Bookmarked

Total users

Monthly active users

13 hours ago

Last modified

Categories

Developer tools

Start URLs

startUrls

Required

URLs to check (Request List Sources format).

Type:array

Max URLs

maxUrls

Optional

Maximum number of URLs to process.

Type:integer

Minimum:1

Default:50

Request timeout (seconds)

timeoutSecs

Optional

Timeout per request.

Type:integer

Minimum:1

Maximum:120

Default:20

Follow redirects

followRedirects

Optional

Whether to follow HTTP redirects.

Type:boolean

Default:true

Max redirects

maxRedirects

Optional

Maximum number of redirects to follow.

Type:integer

Minimum:0

Maximum:30

Default:10

Request strategy

requestStrategy

Optional

How to fetch headers: HEAD first (faster) with optional GET fallback.

Type:string

Default:HEAD_THEN_GET

Options:

HEAD_THEN_GETHEAD_ONLYGET_ONLY

Warn if HSTS header is missing

warnOnMissing

Optional

If enabled, missing Strict-Transport-Security header (on HTTPS final URL) is flagged.

Type:boolean

Default:true

Warn if final URL is not HTTPS

requireHttpsFinal

Optional

If enabled, warns when the final resolved URL is not HTTPS (HSTS cannot be enforced).

Type:boolean

Default:true

Minimum max-age (seconds)

minMaxAgeSeconds

Optional

Warn if max-age is below this value.

Type:integer

Minimum:0

Default:15552000

Require includeSubDomains

requireIncludeSubDomains

Optional

Warn if includeSubDomains is missing.

Type:boolean

Default:false

Require preload directive

requirePreload

Optional

Warn if preload is missing (note: preload also requires includeSubDomains and max-age >= 31536000).

Type:boolean

Default:false

Warn if max-age=0

warnOnMaxAgeZero

Optional

If enabled, flags max-age=0 which disables HSTS.

Type:boolean

Default:true

User-Agent

userAgent

Optional

User-Agent header used for requests.

Type:string

Default:ApifyActor HSTS Header Checker (+https://apify.com)

Max concurrency

maxConcurrency

Optional

How many URLs to check in parallel.

Type:integer

Minimum:1

Maximum:50

Default:10

Proxy configuration

proxyConfiguration

Optional

Proxy settings.

Type:object

Default:

{
  "useApifyProxy": false
}

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

Bug Bounty Recon Scanner

iamuendo/Bug-Bounty-Recon-Scanner

Find exposed admin panels, missing/weak security headers, sensitive file leaks, and HTTPS misconfigurations across target domains. Export prioritised risk scores and JSON reports. Run via API, schedule scans, or integrate with bug bounty tools.

Isaac Muendo

Website Security & Vulnerability Audit

smart-digital/website-security-vulnerability-audit

Automated security and vulnerability audit for websites. Detects WordPress plugin vulnerabilities, checks for updates, analyzes SSL/TLS, security headers, and CMS security

My Smart Digital

5.0

(1)

Seobility SEO Checker (Unlimited)

maged120/seobility-seo-checker

the most powerful scraper for seobility SEO checker tool, the output might feel overwhelming but it's full of details and possibilites, check it out

Maged

5.0

(1)

Website Tech Stack Detector

benthepythondev/website-tech-detector

Detect technologies, frameworks, CMS, analytics, hosting, and more used by any website. Perfect for competitive analysis, sales intelligence, and tech research.

ben

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

DNS Lookup | Scrape Domain Records & Security Intelligence

datascoutapi/dns-lookup

DNS lookup scrapes 22 data points including 10 DNS records (A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, PTR, CAA) + email security analysis ( SPF/DKIM/DMARC), SSL certificate checker, domain monitoring. Processes 100 domains per batch with security scoring.

halam

Cookie Security Flags Checker

scrappy_garden/cookie-security-flags-checker

Fetch URLs and analyze Set-Cookie response headers for security attributes: Secure, HttpOnly, SameSite, plus __Host- / __Secure- prefix rules. Produces per-cookie results with warnings/errors and writes SUMMARY + REPORT for quick auditing.

Bikram Adhikari

Accessibility Scanner

gabrielaxy/accessibility-scanner

Scan any website for WCAG accessibility compliance using axe-core. Get detailed reports with fix code suggestions, severity scores, and remediation priorities. Supports CI/CD integration with threshold-based pass/fail and competitor benchmarking to compare your accessibility against others.

Gabriel Antony Xaviour

7-Zip Recursive Archive Extractor: Enterprise-Grade Automation

roach-sama/universal-archive-extractor

High-performance 7-Zip extractor supporting 30+ formats (ZIP, RAR, 7Z, TAR, ISO, GZIP, BZIP2, XZ, CAB & more). Features recursive nested archive extraction, CRC-based incremental updates to skip unchanged files, security filtering, and dual KV Store + Dataset output. Saves up to 90% compute costs.