Security Header Check
Fetches a URL and grades its security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy — with a specific remediation for each gap.
POST /v1/web/security-header-check $0.01 per call
Specification
- Endpoint
POST /v1/web/security-header-check- Price
- $0.01 per call · tier
standard_data - Payment
-
x402 on X Layer (chain 196) · settled in USDG or USDT0 · scheme
exact - Data source
- Live fetch of the caller-supplied public URL, SSRF-guarded
- Timeout
- 30 seconds
- Max request
- 256 KB
- Version
1.0.0
Calling it
The first call returns a 402 with the payment challenge. Retry with a
signed authorisation in the X-PAYMENT header — see
the payment guide for the exact shape.
curl -i -X POST "https://api.dana-edu.pp.ua/v1/web/security-header-check" \
-H "content-type: application/json" \
-d '{ ... }'Response
Every response is wrapped in the same envelope: data plus
warnings, sources, confidence,
informational_only and a measured processing_ms.
See the envelope reference.
Related endpoints
URL Normalizer
Normalises a URL per RFC 3986 — case, default port, path resolution, IDN to punycode, tracking-parameter removal — and returns each component.
DNS Lookup
Resolves A, AAAA, MX, NS, TXT, CNAME, SOA and CAA records with TTLs and the resolver used.
TLS Certificate Check
Inspects the served certificate chain — subject, issuer, validity window, days remaining, SANs, key algorithm and protocol version.
robots.txt Parser
Fetches and parses robots.txt, resolving whether a given path is allowed for a given user agent and returning the matching rule.