---
title: Security Headers Audit API
slug: security-headers-audit
url: https://apyhub.com/chisleroff/service/security-headers-audit
provider: Website Intelligence
categories: ["Security & Privacy", SEO]
auth: api_key
---

# Security Headers Audit API

Audit a webpage URL for CSP, HSTS, X-Content-Type-Options, Referrer-Policy, and X-Frame-Options. Get a score and header flags for quick security checks.

## Endpoints

| Method | Path | Description | Atoms |
| --- | --- | --- | --- |
| POST | `/chisleroff/intel/headers` | What it does Audits the security headers present on the webpage at the given URL and returns a JSON… | 100 |

## About

## What it does
Security Headers Audit checks a webpage URL and returns a compact audit of common browser security headers. Send an http or https URL, and get back a score plus boolean flags for whether the page sends CSP, HSTS, X-Content-Type-Options, Referrer-Policy, and X-Frame-Options.

Use it when you need a quick security review during deployment, a CI gate for public pages, or a lightweight compliance check across a list of URLs. The response is easy to inspect programmatically: the `score` gives you the overall result, `details` provides additional string-based findings, and the header-specific fields tell you exactly which protections are present.

Security Headers Audit is useful for spotting missing baseline protections before they reach production. It helps developers verify that important response headers are configured on landing pages, app shells, login screens, and other internet-facing endpoints without manually opening browser tools.

Because the input is just a webpage URL, you can plug it into automated checks, internal audits, or scheduled monitoring workflows where you need a fast yes/no view of header coverage.

## Usage

Authenticate with an ApyHub API key in the `apy-token` header.
Full docs and a live playground: https://apyhub.com/chisleroff/service/security-headers-audit