---
title: Security Headers Audit API
slug: security-headers-audit
url: https://apyverse.com/chisleroff/service/security-headers-audit
provider: Website Intelligence
categories: ["Security & Privacy", SEO]
tags: [security-headers, web-audit, hsts, content-security-policy, browser-security]
auth: api_key
---

# Security Headers Audit API

Check a webpage URL for common security headers and get an overall score. Returns booleans for CSP, HSTS, referrer policy, X-Frame-Options, and more.

## Endpoints

| Method | Path | Description | Atoms |
| --- | --- | --- | --- |
| POST | `/chisleroff/intel/headers` | What it does Audits the security headers present on the webpage at the provided URL and returns a J… | 100 |

## About

## What it does
Security Headers Audit checks a webpage URL and returns a header-focused security report. Send an http or https URL in `body.url`, and get back a response with an overall `score` plus boolean flags for `has_csp`, `has_hsts`, `has_x_content_type`, `has_referrer_policy`, and `has_x_frame_options`.

Use it when you want to verify whether a site is sending common browser security headers without building your own crawler or response parser. The `details` object gives you additional string-valued findings, while the boolean fields make it easy to gate releases, run CI checks, or track improvements over time.

This fits well into pre-deployment audits, security review workflows, and automated monitoring for public-facing pages. If you manage a web app, you can check landing pages, login screens, or other critical endpoints and quickly see which protections are present and which ones are missing.

## Usage

Authenticate with an ApyHub API key in the `apy-token` header.
Full docs and a live playground: https://apyverse.com/chisleroff/service/security-headers-audit