Security Headers API
## Website Security Headers Scanner API Scan any website and instantly analyze its HTTP security headers. This API checks for critical security headers and returns a structured JSON report. ### What It Checks - Strict-Transport-Security (HSTS) - Content-Security-Policy (CSP) - X-Frame-Options - X-Content-Type-Options - Referrer-Policy - Permissions-Policy - Cross-Origin-Opener-Policy -…
2 subscribers
4 endpoints
The in-depth APIMemo review for this API hasn't been published yet —
the data below comes straight from the public marketplace listing.
Security Headers API endpoints
| Method | Endpoint | Description |
|---|---|---|
| POST |
/scan-headers /scan-headers |
Scans a website's HTTP security headers and returns a full security report including security score, grade, risk level, missing headers, weak headers, and recommendations. |
| POST |
/check-hsts /check-hsts |
Checks whether a website has Strict-Transport-Security (HSTS) enabled. Returns pass or fail status with a recommendation if the header is missing. |
| POST |
/check-csp /check-csp |
Checks whether a website has a Content-Security-Policy (CSP) header configured. Returns pass or fail status with a recommendation if the header is missing. |
| POST |
/check-info-disclosure /check-info-disclosure |
Checks whether a website exposes technology information through Server or X-Powered-By headers. Detects information disclosure risks that could help attackers fingerprint the… |
Security Headers API pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| PRO | $5 / month | — |
|
| ULTRA | $19 / month | — |
|
| MEGA | $49 / month | — |
|
