All projects on Base matching “hsts”

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Queries target URL headers to score security configurations (HSTS, CSP, X-Frame-Options).

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Fetch a live https URL and score whether the deploy is actually there. POST {"url":"https://your.site","min_score":80} ($0.02). Default x402-seller profile: HTTPS, HSTS, llms.txt, catalog, OpenAPI, MCP, health. Optional claims[] or profile:"web". Returns 0–100, evidence, do_this_first, ci_failed. Humans: GET /v1/tools/claim-check/report?host=your.site. Badge goes stale after 7 days.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are no

Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flags information-leak headers (Server, X-Powered-By), and returns the parsed values plus advisory warnings. Clean JSON for security and pentest automation.