Pricing

Pay per usage

HTTP Security Headers Auditor

Bulk-check URLs for HTTP security headers. Grades sites A+ through F based on HSTS, CSP, XFO, XCTO, Referrer-Policy, and Permissions-Policy presence.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Richard P

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

Purpose

Scans a list of URLs and grades each one (A+ through F) based on the presence of six key security headers:

Header	Short Name	Penalty if Missing
Strict-Transport-Security	HSTS	-15 points
Content-Security-Policy	CSP	-15 points
X-Frame-Options	XFO	-15 points
X-Content-Type-Options	XCTO	-10 points
Referrer-Policy	RP	-10 points
Permissions-Policy	PP	-10 points

Grading Scale

Grade	Score Range	Headers Present
A+	100	All 6
A	90–99	5 of 6
B	80–89	4 of 6
C	65–79	3 of 6
D	50–64	2 of 6
F	0–49	0–1 of 6

Input

Field	Type	Default	Description
`urls`	array	`["https://example.com", "https://httpbin.org"]`	List of URLs to check
`followRedirects`	boolean	`true`	Follow HTTP redirects
`timeout`	integer	`15`	Timeout per request (seconds, max 60)

Output

Each dataset item contains:

url — the URL that was checked
statusCode — HTTP status code
grade — letter grade (A+ through F)
score — numeric score (0–100)
hasHsts, hasCsp, hasXfo, hasXcto, hasRp, hasPp — booleans per header
headersPresent — list of security header names found
headersMissing — list of security header names not found
issues — list of warnings or errors
checkedAt — ISO 8601 timestamp

Local Development

# Install dependencies
pip install -r requirements.txt

# Run with local Apify storage
python3 -m my_actor

Deployment

Deploy to Apify Console or use the Apify CLI:

apify login
apify push

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

junipr

HTTP Security Headers Checker

q_services/http-security-headers-checker

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.

Q Services

HTTP Security Headers Audit

mbeato/apimesh-security-headers

Audit 10 HTTP security headers with A+ to F grading. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and more.

Maximus Beato

Security Headers Checker

artifact-machine/artifact-machine-security-headers-checker

Check security headers (CSP, HSTS, XFO, etc.) on any website. HTTP-only, no browser needed.

The Artifact Machine

Bulk HTTP Security Headers Analyzer - CSP, HSTS

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Logiover

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Bikram Adhikari

Security Headers Checker

s3nafps/security-headers-checker

Check public URLs for common HTTP security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Export a simple website security header report as JSON or CSV.

mohamed senator

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.005 per URL.

Hojun Lee

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

$1/1K 🔥 Fast HTTP security headers checker! HSTS, CSP, X-Frame & a grade for any URL. No key. JSON, CSV, Excel or API in seconds. Paste URLs & audit thousands of sites for security & compliance ⚡