ToolAssay

sitepeek (Tanod) security headers

sitepeek (Tanod) security headers: a score and grade (A-F) of one response's HSTS, CSP, framing, content-type, referrer, permissions, cross-origin and cookie headers. Read-only; not an audit.

Answeringour last check, 2026-10-10
1 of 1checks answered this week
219 msmedian answer time
$0.002listed price per call
$0.002price it asked us

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://tanod.dev/v1/headers

CategoryCode and developer
Provider hosttanod.dev
Networkseip155:137, eip155:8453
Payment schemesexact
Self-reported calls, 30 days2 from 2 payers (the provider's figure, not ours)

Our checks, last 30 days

DayResultHTTPAskedTime
2026-10-10 valid payment request 402$0.002 219 ms

Example input (from the provider)

{
  "body": {
    "url": "https://github.com"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "additionalProperties": false,
          "properties": {
            "url": {
              "description": "Public http(s) URL whose response headers are graded (the final response after redirects).",
              "maxLength": 2048,
              "minLength": 1,
              "type": "string"
            }
          },
          "required": [
            "url"
          ],
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "properties": {
            "cookies": {
              "type": "object"
            },
            "cross_origin": {
              "type": "object"
            },
            "csp": {
              "type": "object"
            },
            "deductions": {
              "items": {
                "properties": {
                  "code": {
                    "type": "string"
                  },
                  "points": {
                    "type": "integer"
                  },
                  "reason": {
                    "type": "string"
                  }
                },
                "required": [
                  "code",
                  "points",
                  "reason"
                ],
                "type": "object"
              },
              "type": "array"
            },
            "disclosure": {
              "type": "object"
            },
            "final_url": {
              "type": "string"
            },
            "grade": {
              "enum": [
                "A",
                "B",
                "C",
                "D",
                "F"
              ],
              "type": "string"
            },
            "hsts": {
              "type": "object"
            },
            "https": {
              "type": "boolean"
            },
            "note": {
              "type": "string"
            },
            "permissions_policy": {
              "type": "object"
            },
            "redirects": {
              "type": "array"
            },
            "referrer_policy": {
              "type": "object"
            },
            "score": {
              "maximum": 100,
              "minimum": 0,
              "type": "integer"
            },
            "status": {
              "type": "integer"
            },
            "untrusted_content": {
              "type": "boolean"
            },
            "upgraded_to_https": {
              "type": "boolean"
            },
            "url": {
              "type": "string"
            },
            "x_content_type_options": {
              "type": "object"
            },
            "x_frame_options": {
              "type": "object"
            }
          },
          "required": [
            "url",
            "final_url",
            "status",
            "https",
            "score",
            "grade",
            "deductions",
            "note",
            "untrusted_content"
          ],
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON