Pricing

from $5.00 / 1,000 audited url security headers

Try for free

Go to Apify Store

Bulk Security Headers, HSTS, CSP & CORS Auditor

Try for free

Bulk-audit URLs for OWASP-style HTTP security headers (HSTS, CSP, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy), CORS exposure, and server header leakage — with a numeric score and A+–F grade.

Pricing

from $5.00 / 1,000 audited url security headers

Rating

0.0

(0)

Developer

Zein Michaels

Actor stats

Bookmarked

Total users

Monthly active users

15 minutes ago

Last modified

Bulk HSTS CSP CORS HTTP Security Header Auditor API through CLI

The Apify CLI is the official tool that allows you to use Bulk Security Headers, HSTS, CSP & CORS Auditor locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Bulk Security Headers, HSTS, CSP & CORS Auditor API in Python

Bulk Security Headers, HSTS, CSP & CORS Auditor API in JavaScript

Bulk Security Headers, HSTS, CSP & CORS Auditor OpenAPI definition

Bulk Security Headers, HSTS, CSP & CORS Auditor API

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

Bulk security headers scanner: grade any URL A-F on HSTS, CSP, X-Frame-Options & 3 more headers, list missing ones and server leaks. For security audits, agencies and compliance.

ninhothedev

HTTP Probe -- TLS, Security Headers, Redirects

jungle_synthesizer/ssl-security-headers-checker

Bulk site-health probe: TLS certificate, security-header grading (CSP, HSTS, X-Frame-Options, Permissions-Policy + 5 others, A/B/C/D/F grade), redirect chain, TTFB, HTTP/2 + HTTP/3, IPv6 reachability. Built for devops, security, and CI pipelines.

BowTiedRaccoon

HTTP Headers Checker - Security Header Audit

benthepythondev/http-headers-checker

Check HTTP response headers for websites, including status code, server, cache settings, redirects and common security headers.

Ben

Security Headers Scanner

mahogany_songbird/security-headers-scanner

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Britton Furness

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.004 per URL plus $0.001 per run.

Hojun Lee

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

Security Headers Checker - Audit CSP, HSTS, XFO and more

scrappy_garden/security-headers-checker

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.