ToolAssay

Security headers check for a website

Security headers check for a website: audits HTTPS, HSTS, Content- Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options / clickjacking protection, Referrer-Policy and CORS from the real HTTP response of any live URL. Findings with severity for what is missing. Header posture only, not a penetration test.

Answeringour last check, 2026-09-24
1 of 1checks answered this week
642 msmedian answer time
$0.05listed price per call
$0.05price it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://hubvibe-io.com/audit/security

CategoryCode and developer
Provider hosthubvibe-io.com
Networkseip155:8453, solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp
Payment schemesexact
Self-reported calls, 30 days5 from 1 payers (the provider's figure, not ours)

Our checks, last 30 days

DayResultHTTPAskedTime
2026-09-24 valid payment request 402$0.05 642 ms

Example input (from the provider)

{
  "body": {
    "url": "https://example.com"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "url": {
              "description": "Live, fetchable http(s) URL to audit.",
              "examples": [
                "https://example.com"
              ],
              "format": "uri",
              "type": "string"
            }
          },
          "required": [
            "url"
          ],
          "title": "Live URL to audit",
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST",
            "PUT",
            "PATCH"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "findings": {
              "description": "One entry per rule that did not pass. Empty when the check is clean.",
              "items": {
                "properties": {
                  "detail": {
                    "description": "What failed and where.",
                    "type": "string"
                  },
                  "id": {
                    "description": "Stable rule identifier.",
                    "type": "string"
                  },
                  "severity": {
                    "description": "Rule severity.",
                    "type": "string"
                  }
                },
                "required": [
                  "id"
                ],
                "type": "object"
              },
              "type": "array"
            },
            "pass": {
              "description": "Whether every rule in this dimension passed.",
              "type": "boolean"
            },
            "status": {
              "const": "ok",
              "description": "Present only on a completed audit.",
              "type": "string"
            }
          },
          "required": [
            "pass"
          ],
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON