Bulk Security Headers, HSTS, CSP & CORS Auditor

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

Bulk security headers scanner: grade any URL A-F on HSTS, CSP, X-Frame-Options & 3 more headers, list missing ones and server leaks. For security audits, agencies and compliance.

HTTP Probe -- TLS, Security Headers, Redirects

jungle_synthesizer/ssl-security-headers-checker

Bulk site-health probe: TLS certificate, security-header grading (CSP, HSTS, X-Frame-Options, Permissions-Policy + 5 others, A/B/C/D/F grade), redirect chain, TTFB, HTTP/2 + HTTP/3, IPv6 reachability. Built for devops, security, and CI pipelines.

HTTP Headers Checker - Security Header Audit

benthepythondev/http-headers-checker

Check HTTP response headers for websites, including status code, server, cache settings, redirects and common security headers.

Report CSP, HSTS, X-Frame-Options, and other security headers with a simple A-F grade.

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.004 per URL plus $0.001 per run.

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Check common HTTP security headers for one or more URLs (Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP). Useful for quick security hardening audits.

Ultimate High-Performance CORS Proxy & Bypass Gateway API

dev00/ultimate-cors-proxy-api

Bypass restrictive 'Access-Control-Allow-Origin' and SOP browser blocks. Programmatically fetch and proxy request datasets securely from any API.

Audit HSTS, CSP, X-Frame-Options, Referrer-Policy and other HTTP security headers in bulk.