---
title: Security Header Full Audit API
slug: audit-website-security-headers
url: https://apyhub.com/namastesumalya/service/audit-website-security-headers
provider: Sumalya APIs
categories: ["Security & Privacy", SEO]
auth: api_key
---

# Security Header Full Audit API

Audit a URL’s security headers and get a score, header status, and recommendations. Useful for checking CSP, HSTS, and other browser protections.

## Endpoints

| Method | Path | Description | Atoms |
| --- | --- | --- | --- |
| POST | `/namastesumalya/api/security` | What it does Audits the security headers for a website URL and returns the URL, an overall score, r… | 100 |

## About

## What it does
Website Security Headers audits a site’s HTTP security headers and returns a simple score, the URL checked, and practical recommendations. Send a URL in the request body and get back the header status for common protections, including `csp`, `hsts`, and `x_frame_options`.

Use it when you want a quick security baseline for a production site, a staging environment, or a customer-facing landing page. The response tells you which headers are present or missing, so you can spot gaps that affect browser-side protection and harden your deployment without manual inspection.

The output is easy to use in internal dashboards, CI checks, or security review workflows. The `recommendations` array gives you concrete next steps, such as adding a `Content-Security-Policy` header, while the `score` helps you compare sites or track improvements over time.

If you need a lightweight check for common web hardening headers, Website Security Headers gives you the core signal in one response.

## Usage

Authenticate with an ApyHub API key in the `apy-token` header.
Full docs and a live playground: https://apyhub.com/namastesumalya/service/audit-website-security-headers