Security Headers API

The securityheaders.com API is gone. This is the drop-in.

Snyk shut down the securityheaders.com API in 2026. MySSL gives you the same A+→F grade over a free JSON API — change one line and your CI keeps working.

🔁

One line to migrate

- GET https://api.securityheaders.com/?q=example.com
+ GET https://myssl.info/headers/check?q=example.com

Same grade scale. Compatible JSON (summary.grade, summary.headers, score, testsPassed/Failed, rawHeaders) plus a richer myssl block. Try it: /headers/check?q=github.com

⚡

Quick start

curl

curl "https://myssl.info/headers/check?q=example.com"

GitHub Actions (fail under a grade)

- run: |
    G=$(curl -s "https://myssl.info/headers/check?q=${{ env.SITE }}" | jq -r .grade)
    echo "Grade: $G"; case "$G" in A+|A|B) ;; *) exit 1;; esac

🤝

Our API Stability & Longevity Pledge

A permanently free tier for basic, on-demand checks.
If we ever change a public endpoint: a documented successor ships first, with ≥12 months' notice and in-band Deprecation/Sunset headers so headless CI gets warned.
We're independent and security-focused. We won't strand you the way the tool you came from did.

The anonymous endpoint is rate-limited for occasional checks. For CI volume, scheduled monitoring and grade-drop alerts, create a free account.

The securityheaders.com API is gone. This is the drop-in.

Monitor headers, don't just check them

Report a bug

Thank you!