Security Headers Audit API

What it does

Security Headers Audit checks a webpage URL and returns a header-focused security report. Send an http or https URL in body.url, and get back a response with an overall score plus boolean flags for has_csp, has_hsts, has_x_content_type, has_referrer_policy, and has_x_frame_options.

Use it when you want to verify whether a site is sending common browser security headers without building your own crawler or response parser. The details object gives you additional string-valued findings, while the boolean fields make it easy to gate releases, run CI checks, or track improvements over time.

This fits well into pre-deployment audits, security review workflows, and automated monitoring for public-facing pages. If you manage a web app, you can check landing pages, login screens, or other critical endpoints and quickly see which protections are present and which ones are missing.