HTTP Security Headers Checker avatar

HTTP Security Headers Checker

Pricing

$20.00 / 1,000 headers checkeds

Go to Apify Store
HTTP Security Headers Checker

HTTP Security Headers Checker

Pricing

$20.00 / 1,000 headers checkeds

Rating

0.0

(0)

Developer

Anthony Snider

Anthony Snider

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

3 days ago

Last modified

Share

Grade any site's HTTP security headers in one call — HSTS, CSP, X-Frame-Options and more, with an A–F grade and what's missing. No API key, pay per URL.

▶ Live on the Apify Store: https://apify.com/eliai/security-headers-checker — run it instantly, or call it as an agent tool via Apify MCP.

What it checks

  • Strict-Transport-Security (HSTS) — forces HTTPS
  • Content-Security-Policy — mitigates XSS/injection
  • X-Frame-Options — prevents clickjacking
  • X-Content-Type-Options — stops MIME sniffing
  • Referrer-Policy — controls referrer leakage
  • Permissions-Policy — restricts powerful browser features

Returns an A–F grade + score, the headers present (with values), and the missing ones with why each matters.

Input

{ "url": "https://example.com" }

or bulk:

{ "urls": ["https://a.com", "https://b.com"], "maxUrls": 25 }

Output (per URL)

{
"url": "https://example.com",
"grade": "B",
"securityScore": 66,
"present": [{ "header": "Strict-Transport-Security (HSTS)", "value": "max-age=31536000" }],
"missing": [{ "header": "Content-Security-Policy", "why": "Mitigates XSS and content-injection" }],
"summary": "B (66/100) — 2 missing"
}

Use cases

Security audits, compliance checks, and pre-launch hardening — by hand or wired into a CI/agent pipeline. Pairs with our SEO & Tech Auditor and Broken Link Checker.