HTTP Security Headers Grader
SecurityGrade HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) with A-F scoring.
Grade HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) with A-F scoring.
Get access to all 150+ tools with higher limits. Start with 100 free credits — no credit card required.
curl -X POST "https://krawly.io/api/v1/tools/security-headers-grader/" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{"url": "https://example.com"}'HTTP Security Headers Grader checks 8 critical security headers and grades your site A-F based on their presence and configuration.
Check DMARC, SPF, and DKIM DNS records for any domain to assess email authentication and prevent spoofing.
Find HTTP resources loaded on HTTPS pages. Detect active and passive mixed content issues.
Analyze Content Security Policy headers. Check for unsafe-inline, unsafe-eval, and wildcards.
Analyze cookies set by a website. Check Secure, HttpOnly, SameSite flags and compliance issues.