Pricing

$10.00 / 1,000 site auditeds

Try for free

Go to Apify Store

Security Headers & TLS Expiry Checker

Try for free

Check HTTP security-header presence (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) and TLS certificate expiry for a list of sites. Score reflects header presence only - an informational signal, not a security audit or verdict.

Pricing

$10.00 / 1,000 site auditeds

Rating

0.0

(0)

Developer

Tom

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

How it works

One lightweight request per site (HEAD, with GET fallback when HEAD is not supported) to read response headers.
Checks presence of six common security headers: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
Opens a TLS handshake to read the certificate's expiry date and days remaining.
Score = share of the six headers present, as a percentage.

Input

{"urls": ["https://example.com"]}

Up to 500 sites per run. Only public HTTPS/HTTP destinations are accepted; private and loopback addresses are refused.

Output

One dataset row per site: URL, per-header presence, score, TLS expiry date and days remaining, plus errors where a site could not be reached.

Charging

Pay per event: one site-audited event per site checked ($0.01). Unreachable sites that fail before any check completes are not charged.

Limitations

Presence-only checks. A present header can still be misconfigured; an absent header can be mitigated elsewhere (e.g. at a CDN).
Some sites block HEAD requests or bots; the GET fallback covers most, but results for blocking sites may be incomplete.

Website Security Audit - Headers, SSL & Exposure Scanner

smart-digital/website-security-vulnerability-audit

Scan any website and get a 0-100 security score with the findings behind it: missing HTTP security headers, SSL/TLS issues, exposed files and server banners, CMS admin exposure, each with a severity and a concrete fix.

My Smart Digital

5.0

(1)

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

SAHIL KUMAR

HTTP Probe -- TLS, Security Headers, Redirects

jungle_synthesizer/ssl-security-headers-checker

Bulk site-health probe: TLS certificate, security-header grading (CSP, HSTS, X-Frame-Options, Permissions-Policy + 5 others, A/B/C/D/F grade), redirect chain, TTFB, HTTP/2 + HTTP/3, IPv6 reachability. Built for devops, security, and CI pipelines.

BowTiedRaccoon

Security Headers Checker API - HTTP Security Scanner

pink_comic/security-headers-checker

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Ava Torres

SSL Certificate Checker

automation-lab/ssl-certificate-checker

SSL Certificate Checker connects to domains over TLS and inspects their SSL certificates. It returns structured data about certificate validity, expiry, issuer chain, TLS protocol version, cipher suite, and a security grade from A+ to F.

Automation Lab

Website Security Headers Checker

gochujang/security-headers-checker

Audit HTTP security headers for any URL: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Returns a 0-100 score + letter grade + actionable findings. $0.004 per URL plus $0.001 per run.

Hojun Lee

HTTP Security Headers Checker — HSTS, CSP, Grade A-F

ninhothedev/security-headers-checker

Bulk security headers scanner: grade any URL A-F on HSTS, CSP, X-Frame-Options & 3 more headers, list missing ones and server leaks. For security audits, agencies and compliance.

ninhothedev

HTTP Security Headers Analyzer

andok/security-headers-analyzer

Audit HTTP response headers (CSP, HSTS, X-Frame-Options) to verify web application security and compliance standards.

Andok

SSL Certificate Inspector - TLS Audit & Expiry Monitor

santamaria-automations/ssl-certificate-inspector

Inspect SSL/TLS certificates for any domain: chain validation, expiry dates, cipher suites, TLS versions, subject alt names, issuer details, and security scoring. Export data, run via API, schedule and monitor runs, or integrate with other tools.