{"uid":"cap_10iGayShbY_cs3S4TXrKK","slug":"vextorium-security-headers-audit-12da80f5","name":"Vextorium Security Headers Audit","description":"232 pay-per-call data APIs for AI agents: official statistics and economy (ECB, Fed, Eurostat, World Bank, SEC, BOE, INE), crypto prices and sentiment, Spanish public data, compliance (sanctions, VAT, IBAN, LEI), science, weather, web and developer tools and local AI text tools. Pay in USDC via x402.","url":"https://api.vextorium.com/v1/security-headers?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"url":{"type":"string","description":"Website URL or domain"}}},"responseSchema":{"type":"json","example":{"note":"Passive header review; not a full security audit.","score":"1/7","server":"cloudflare","cookies":[],"url_final":"https://example.com/","uses_https":true,"status_code":200,"missing_headers":[{"header":"strict-transport-security","what_it_is_for":"HSTS: forces HTTPS"}],"present_headers":{}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_hk_vRDM9enOiuvaUBXlwf","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a website's HTTP security headers (HTTPS, HSTS, CSP, X-Frame-Options, etc.) and returns a scored report of present and missing headers with explanations.","exampleAgentPrompt":"Can you audit the security headers on https://mycompany.com and tell me which ones are missing, which are present, and what score it gets?","exampleUseCases":[{"title":"Pre-launch security checklist","prompt":"Before we go live, can you check https://staging.myapp.com for missing security headers like HSTS, CSP, and X-Frame-Options, and give me a score so I know what to fix?"},{"title":"Third-party vendor security review","prompt":"I need to vet a vendor — can you audit the security headers on https://vendor-portal.example.com and tell me if they have proper HTTPS, HSTS, and cookie flags set?"},{"title":"Compliance remediation check","prompt":"We just pushed a security fix to our site at https://shop.mybrand.io — can you re-scan the security headers and confirm whether Referrer-Policy and Permissions-Policy are now present?"}],"resultDescription":"Returns a JSON object with: a score (e.g. '1/7'), whether the site uses HTTPS, the final resolved URL, HTTP status code, server identifier, a list of present headers (as key-value pairs), a list of missing headers with explanations of what each one does, cookie security flags, and a note that this is a passive header review rather than a full security audit.","failureModes":["Unreachable or invalid URL returns an error or incomplete data","Sites behind WAFs or Cloudflare bot protection may block the audit request","Redirect chains may cause the final URL to differ from the input","Score may be low for legitimate single-page apps that intentionally omit some headers","Non-HTTPS URLs may return limited results if the site redirects to HTTPS"],"whenToPreferThis":"Use this endpoint when you need a quick, automated audit of a website's HTTP security header configuration — especially useful for pre-launch checks, vendor assessments, or compliance reviews. It covers the standard set of seven security headers plus cookie flags in a single call, returning actionable details about what is missing and why it matters. Prefer this over manual curl-based checks or full penetration testing tools when you want a fast, programmatic, scored summary without authentication or browser rendering.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T12:45:59.421Z","isFirstParty":false,"canonicalSlug":"vextorium-security-headers-audit-12da80f5"}