HTTP Security Headers Audit

Follow a URL's HTTP redirect chain and audit response security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy), grading A+ to F on the six core headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy; COOP/CORP/COEP are reported but not graded) and flagging information leaks such as server-version disclosure.

get/api/util/http

Request

  • Base URL: https://dechonet.com
  • URL: https://dechonet.com/api/util/http
  • Auth: one of:
    • none
    • HTTP bearer

Query parameters

urlstring required

Full URL including scheme (e.g., 'https://example.com/path'). If the scheme is omitted, https:// is assumed. Redirects are followed starting from this URL.

lang'en' | 'ko'

Language of the interpretation text.

Response

Result

okboolean required
requestIdstring required
cachedboolean required

True when a recent stored result was returned.

updatedAtstring date-time nullable

When the result was produced.

dataunknown required
previousSnapshotobject

The previous stored result for the same target, when there is one.

Changes

No recorded changes to this operation across all 1 revision of this API.