Header Security Check (x402)

Example response

{
  "url": "http://1.1.1.1",
  "cors": {
    "access-control-allow-origin": "*"
  },
  "grade": "C",
  "score": 65,
  "server": "cloudflare",
  "missing": [
    {
      "header": "strict-transport-security",
      "severity": "high",
      "recommendation": "Add: Strict-Transport-Security: max-age=31536000; includeSubDomains"
    },
    {
      "header": "permissions-policy",
      "severity": "medium",
      "recommendation": "Add Permissions-Policy to restrict browser features (camera, microphone, etc.)"
    }
  ],
  "present": [
    {
      "value": "default-src 'none'; script-src 'self' 'sha256-qcMXZ/ErgDG9p2Htysz9era6iflv8JXya41zOY0slSc=' 'sha256-ydM8qJ+T0Nd7adK8t34/cs0GvvCG0JBujCWzV3uML8E=' 'sha256-TzTXRDJBcbY1qVQheGb/4iSGqKPqCg6XVoerYf5BYMY=' ",
      "header": "content-security-policy",
      "status": "present"
    },
    {
      "value": "DENY",
      "header": "x-frame-options",
      "status": "present"
    },
    {
      "value": "nosniff",
      "header": "x-content-type-options",
      "status": "present"
    },
    {
      "value": "strict-origin-when-cross-origin",
      "header": "referrer-policy",
      "status": "present"
    }
  ],
  "response_status": 404
}