HTTP Security Headers Checker
Pricing
$20.00 / 1,000 headers checkeds
HTTP Security Headers Checker
Pricing
$20.00 / 1,000 headers checkeds
Rating
0.0
(0)
Developer
Anthony Snider
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 days ago
Last modified
Categories
Share
Grade any site's HTTP security headers in one call — HSTS, CSP, X-Frame-Options and more, with an A–F grade and what's missing. No API key, pay per URL.
▶ Live on the Apify Store: https://apify.com/eliai/security-headers-checker — run it instantly, or call it as an agent tool via Apify MCP.
What it checks
- Strict-Transport-Security (HSTS) — forces HTTPS
- Content-Security-Policy — mitigates XSS/injection
- X-Frame-Options — prevents clickjacking
- X-Content-Type-Options — stops MIME sniffing
- Referrer-Policy — controls referrer leakage
- Permissions-Policy — restricts powerful browser features
Returns an A–F grade + score, the headers present (with values), and the missing ones with why each matters.
Input
{ "url": "https://example.com" }
or bulk:
{ "urls": ["https://a.com", "https://b.com"], "maxUrls": 25 }
Output (per URL)
{"url": "https://example.com","grade": "B","securityScore": 66,"present": [{ "header": "Strict-Transport-Security (HSTS)", "value": "max-age=31536000" }],"missing": [{ "header": "Content-Security-Policy", "why": "Mitigates XSS and content-injection" }],"summary": "B (66/100) — 2 missing"}
Use cases
Security audits, compliance checks, and pre-launch hardening — by hand or wired into a CI/agent pipeline. Pairs with our SEO & Tech Auditor and Broken Link Checker.