Apps similar to Security Headers include DetectZeStack, which has a free version. Other options are HTTP Observatory, ConfigClarity, Qualys SSL Server Test and REDbot. You can choose from more than 10 Website Monitoring Tools like Security Headers for the web, self-hosting, Mac, Windows and Linux.
API suite for website intelligence: tech stack detection (Wappalyzer fingerprinting + DNS + TLS + HTTP headers), SSL/TLS certificate inspection, DNS intelligence with provider enrichment, security header analysis with letter grading, and technology change monitoring.
Developed by Mozilla, the HTTP Observatory performs an in-depth assessment of a site’s HTTP headers and other key security configurations.
United States
ConfigClarity is a suite of 6 browser-based audit tools for developers and sysadmins managing self-hosted infrastructure. Paste your configs and get instant visual audits with copy-paste fixes.
United States
This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.
United States
REDbot is lint for HTTP resources. it tests protocol correctness, cacheability, content negotiation and more.
Australia
Hardenize provides a comprehensive and free assessment of web site network and security configuration.
United Kingdom
The Website Security Test is a free online tool to perform web security and privacy tests:
Switzerland
Free continuous website security scanner and uptime monitor. Scan any site in 2 seconds, we checks TLS/SSL, security headers, DNS, exposed files, misconfigs and cookies.
Israel
Scruty is a comprehensive web security analysis platform that evaluates your website's security posture in seconds. It performs over 20 automated checks including SSL/TLS certificates, HTTP security headers (CSP, HSTS, X-Frame-Options), DNS configuration (DNSSEC, SPF, DKIM...
France
EU
Reviewing a website's Content-Security-Policy settings, suggesting improvements to protection, and possible bypasses to the policy.
Comprehensive SSL/TLS monitoring. We proactively monitor your SSL/TLS enabled domains to prevent expiry, misconfiguration, and insecure protocols. We watch and report any changes to your certificate so you can detect and respond to attempts at tampering or domain takeover.
