Pricing

from $20.00 / 1,000 page auditeds

Try for free

Go to Apify Store

Website Security Audit - Headers, SSL & Exposure Scanner

Try for free

Scan any website and get a 0-100 security score with the findings behind it: missing HTTP security headers, SSL/TLS issues, exposed files and server banners, CMS admin exposure, each with a severity and a concrete fix.

Pricing

from $20.00 / 1,000 page auditeds

Rating

5.0

(1)

Developer

My Smart Digital

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

Categories

Developer tools

SEO tools

Automation

You can access the Website Security Audit - Headers, SSL & Exposure Scanner programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {};
11
12// Run the Actor and wait for it to finish
13const run = await client.actor("smart-digital/website-security-vulnerability-audit").call(input);
14
15// Fetch and print Actor results from the run's dataset (if any)
16console.log('Results from dataset');
17console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
18const { items } = await client.dataset(run.defaultDatasetId).listItems();
19items.forEach((item) => {
20    console.dir(item);
21});
22
23// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Website Security Scanner - Headers, SSL & Exposure Audit API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Website Security Audit - Headers, SSL & Exposure Scanner API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Website Security Audit - Headers, SSL & Exposure Scanner API in Python

Website Security Audit - Headers, SSL & Exposure Scanner API through CLI

Website Security Audit - Headers, SSL & Exposure Scanner OpenAPI definition

Website Security Audit - Headers, SSL & Exposure Scanner API

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

Domain & HTTPS Security Audit — SSL Expiry & Headers

paoe/domain-https-security-audit

Rashad Flet

HTTP Security Headers Inspector

aetheragent/http-header-inspector

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Grant Mitchell

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

Techionik

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

HTTP & Security Headers Auditor

bgfc97/http-security-headers-audit

Audit any list of URLs: status, final redirect, HTTPS, server, security headers (HSTS, CSP, X-Frame-Options...), a security score, page title and CMS/generator. No key, no proxy.

Bruno

GuardHawk — Domain Security Audit: SSL, DNS, Takeover Risk

inexhaustible_glass/domain-health-audit

Full domain security audit in one call: SSL/TLS, DNS, SPF/DKIM/DMARC, security headers, WHOIS, blacklist, tech stack — PLUS subdomain-takeover risk and public S3-bucket exposure detection, which no other domain-audit tool checks. Returns a 0-100 health score + fix list. No API key, no login.

Hitman studio

SSL Certificate & Security Header Audit

technicaldost/ssl-certificate-security-audit

Check TLS certificates and security headers for any list of domains. Returns issuer, expiry with days remaining, hostname coverage, chain trust, TLS version, plus missing security headers - graded A to F. Built for scheduled expiry monitoring. No API key.

Technical Dost Solutions

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.