---
title: Audit Website Security API
slug: website-security-audit
url: https://apyhub.com/dosvak/service/website-security-audit
provider: Dosvak LLC
categories: ["Security & Privacy", SEO]
tags: [website-security, tls-audit, security-headers, cookie-security, site-audit]
auth: api_key
---

# Audit Website Security API

Audit a website for TLS, security headers, cookie flags, and basic exposure issues. Returns a score, findings, and remediation hints.

## Endpoints

| Method | Path | Description | Atoms |
| --- | --- | --- | --- |
| POST | `` | What it does Audits the website at the supplied url and returns a JSON object summarizing basic sec… | 100 |

## About

## What it does
Website Security Audit checks a public site for basic security signals and returns a concise report you can act on. Send a `url`, and optionally set `follow_redirects`, to inspect the destination site over HTTPS.

The response includes the audited `url` and `host`, whether `https` is in use, and a `score` from 0 to 100. You also get `tls_valid` plus boolean checks for common protections: cookie flags (`secure`, `http_only`, `same_site`) and headers (`csp`, `hsts`, `referrer_policy`, `x_frame_options`, `x_content_type_options`).

When the audit finds issues, `findings` returns an array of objects with an `id`, `message`, `severity`, and `recommendation`. That makes it useful for automated site reviews, pre-release checks, and monitoring of public properties where you want a quick view of missing TLS or defensive headers without running a full scanner.

## Usage

Authenticate with an ApyHub API key in the `apy-token` header.
Full docs and a live playground: https://apyhub.com/dosvak/service/website-security-audit