---
title: Security Header Full Audit API
slug: audit-website-security-headers
url: https://apyverse.com/namastesumalya/service/audit-website-security-headers
provider: Sumalya APIs
categories: ["Security & Privacy", SEO]
tags: [security-headers, website-audit, content-security-policy, hsts, x-frame-options, web-security]
auth: api_key
---

# Security Header Full Audit API

Check a URL for CSP, HSTS, and X-Frame-Options, with a score and fix recommendations for missing security headers.

## Endpoints

| Method | Path | Description | Atoms |
| --- | --- | --- | --- |
| POST | `/namastesumalya/api/security` | What it does Audits a website’s security headers for the URL you provide in the request body and re… | 100 |

## About

## What it does
Website Security Header Audit checks a URL and returns a score, a header-by-header summary, and recommendations for fixing missing or weak browser security controls.

Send a website URL in the request body. The service evaluates the site and responds with the URL, an integer `score`, a `security_headers` object, and a `recommendations` array of strings. The header summary includes `csp`, `hsts`, and `x_frame_options`, with values such as `present` or `missing` so you can see which protections are in place at a glance.

Use it when you need to audit production sites, gate a release, or track security hardening across a portfolio of domains. It is useful for CI checks, compliance reviews, and lightweight security monitoring where you want a quick verdict instead of a full browser-based scan.

The response is intentionally compact, making it easy to store, compare over time, or surface in internal dashboards. If a site is missing important headers, the recommendations list points to the next remediation step, such as adding a Content-Security-Policy header.

## Usage

Authenticate with an ApyHub API key in the `apy-token` header.
Full docs and a live playground: https://apyverse.com/namastesumalya/service/audit-website-security-headers