VOOZH about

URL: https://apify.com/technicaldost/http-security-headers

⇱ HTTP Security Headers Analyzer — CSP, HSTS, Grade · Apify

👁 HTTP Security Headers Analyzer — CSP, HSTS Grader avatar

HTTP Security Headers Analyzer — CSP, HSTS Grader

Pricing

Pay per usage

Go to Apify Store

HTTP Security Headers Analyzer — CSP, HSTS Grader

Pricing

Pay per usage

Rating

0.0

(0)

Developer

👁 Technical Dost Solutions

Technical Dost Solutions

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

6 days ago

Last modified

Share

HTTP Security Headers Analyzer Analyze and grade any site's HTTP security headers — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy — with an A–F grade. No API key. Built for developers who need fast, reliable, bulk results without managing servers or proxies.

Features

  • One structured JSON record per url.
  • Bulk + concurrent — process up to 100 urls per run.
  • No proxy, no browser, no API key — fast and low-cost.
  • Graceful failures: unreachable inputs return ok: false with an error; the run never crashes.

Input

{"urls":["https://github.com","https://apify.com"],"maxItems":100}

Output

One record per url:

{
"url":"https://github.com",
"ok":true,
"status":200,
"grade":"A",
"score":9,
"maxScore":9,
"present":["HSTS","CSP","X-Frame-Options"],
"missing":[],
"headers":{"HSTS":"max-age=31536000"}
}

Who it's for

  • Security engineers auditing web apps
  • Pentesters & bug-bounty hunters
  • DevSecOps CI gates
  • Agencies running site security reports

How to use

  1. Add your urls to the urls input field.
  2. Run the Actor and read one structured record per input from the dataset.
  3. Export as JSON, CSV, or Excel, or call the Actor's API from your backend.

FAQ

Do I need an API key? No. You provide urls; the Actor does the rest. Does it return personal data? No — only public infrastructure/metadata, never personal contact data. What formats can I export? JSON, CSV, and Excel via the dataset, or the Actor API.

Pricing

Pay-per-event: a tiny per-run start fee plus a small per-result charge. You pay only for successful results. See the Pricing tab.

Further reading

  • Keyword: HTTP security headers analyzer.

You might also like

Bulk HTTP Security Headers Analyzer — CSP, HSTS & Score

logiover/bulk-http-security-headers

Analyze HTTP security headers for thousands of URLs. Checks CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and more. Returns pass/fail per header plus a numeric security score. No API key, export to CSV/JSON. Ideal for security audits and compliance scanning.

Security Headers Checker

pillowy_travel/security-headers-checker

Analyze HTTP security headers of websites and generate a security score. Detect missing headers like CSP, HSTS, X-Frame-Options, and more. Perfect for web security audits, vulnerability checks, learning, and automated monitoring.

👁 User avatar

SAHIL KUMAR

74

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

👁 User avatar

naoki anzai

2

HTTP Headers Security Audit

techionik9993/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.

Security Headers Checker — OWASP Audit & Grading

accurate_pouch/security-headers

Audit 12 HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, CORP, COEP). A-F grading, actionable recommendations. 5 URLs free.

👁 User avatar

Manchitt Sanan

2