Domain Security Audit (TLS, HTTP headers, redirects, robots)

HTTP & Security Headers Auditor

bgfc97/http-security-headers-audit

Audit any list of URLs: status, final redirect, HTTPS, server, security headers (HSTS, CSP, X-Frame-Options...), a security score, page title and CMS/generator. No key, no proxy.

Redirect Contract Verifier

plutonus/redirect-contract-verifier

Check whether a URL redirects to the destination you expect. Get a deterministic PASS/WARN/FAIL result with the final URL, HTTP status, redirect chain, and reason code.

On-Page SEO Audit

webdatatools/seo-page-audit

On-Page SEO Audit checks title, meta description, headings, images, links, Open Graph, Twitter Card and Schema.org data for any list of URLs — one scored row per page.

Website Security Headers & HTTPS Audit

moonweil/website-security-audit

Crawl your website for missing or weak security headers (HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection), insecure cookies, mixed content, and HTTP-to-HTTPS gaps. Passive and safe: only reads responses, never probes. Per-page score plus site summary.

Domain Security Auditor — DMARC, SPF, DKIM, TLS & DNS in bulk

datadeltas/domain-security-auditor

Audit any list of domains for email spoofing risk and web security: SPF (with real lookup counting), DKIM, DMARC policy, MTA-STS, TLS expiry, DNSSEC, CAA and security headers — scored, graded, with the fix for every finding.

Domain Security Checker

automation-lab/bulk-domain-security-posture-checker

Audit public domains across DNS, SPF, optional DKIM, DMARC, TLS, HTTPS, and security headers with severity-tagged remediation findings.

Grades the security headers of every domain in a list: HSTS, CSP, X-Frame-Options and more, plus TLS. No browser needed, so it runs fast and cheap over large lists.

On-page SEO audit and technical SEO audit at scale: meta robots, canonical tag, hreflang, XML sitemap, redirect chain, heading hierarchy, image alt and page speed. 0-100 score, severity-ranked issues, 235-signature tech detection. Pure HTTP, no browser.

Domain Expiration, DNS & SSL Intelligence Auditor

unrivaled_fortress/domain-whois-expiration-dns-intel

Audit domain age, expiration dates, DNS records (A, MX, NS), and SSL certificates. Built for domain investors, SEO drop-catchers, and cybersecurity analysts.

Find a domain's subdomains from Certificate Transparency logs, resolve each to its IP, and check the live SSL certificate (issuer, expiry, days left). Open-source recon, no API key.