{ "x402Version": 2, "id": 29493, "slug": "29493", "resource": "https://netintel.dev/security-headers/analyze", "description": "Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).", "type": "http", "serviceName": "NetIntel", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png", "resourceType": "Beauty & Personal Care", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 }, { "scheme": "exact", "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp", "payTo": "8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s", "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v", "amount": "10000", "amountUsd": 0.01, "maxTimeoutSeconds": 300 } ], "outputSchema": { "properties": { "example": { "properties": { "deductions": { "type": "array" }, "errors": { "type": "array" }, "grade": { "type": "string" }, "meta": { "type": "object" }, "results": { "type": "object" }, "score": { "type": "number" }, "service": { "type": "string" }, "target": { "type": "string" }, "timestamp": { "type": "string" }, "warnings": { "type": "array" } }, "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "method": "GET", "queryParams": { "target": "https://example.com" }, "type": "http" }, "output": { "example": { "deductions": [ { "points": -5, "reason": "Permissions-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Resource-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Embedder-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Opener-Policy not set" }, { "points": -3, "reason": "X-Powered-By header exposes server framework" } ], "errors": [], "grade": "B", "meta": { "duration_ms": 312 }, "results": { "anti_patterns": [ { "header": "x-powered-by", "raw_value": "Express", "reason": "Information leakage — reveals server framework", "severity": "warn" } ], "content_type": "text/html; charset=utf-8", "final_url": "https://example.com/", "headers": { "content-security-policy": { "present": true, "raw_value": "default-src 'self'", "reason": "Content-Security-Policy is set with a strong policy", "status": "pass" }, "cross-origin-embedder-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Embedder-Policy not set", "status": "info" }, "cross-origin-opener-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Opener-Policy not set", "status": "info" }, "cross-origin-resource-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Resource-Policy not set", "status": "info" }, "permissions-policy": { "present": false, "raw_value": null, "reason": "Permissions-Policy not set — browser features not restricted", "status": "warn" }, "referrer-policy": { "present": true, "raw_value": "strict-origin-when-cross-origin", "reason": "Referrer-Policy is set to strict-origin-when-cross-origin", "status": "pass" }, "strict-transport-security": { "present": true, "raw_value": "max-age=31536000; includeSubDomains", "reason": "HSTS enabled with max-age=31536000", "status": "pass" }, "x-content-type-options": { "present": true, "raw_value": "nosniff", "reason": "X-Content-Type-Options is set to nosniff", "status": "pass" }, "x-frame-options": { "present": true, "raw_value": "DENY", "reason": "X-Frame-Options is set to DENY", "status": "pass" }, "x-xss-protection": { "present": false, "raw_value": null, "reason": "X-XSS-Protection not set — modern browsers use CSP instead", "status": "info" } }, "status_code": 200, "summary": { "fail": 0, "info": 4, "pass": 6, "warn": 0 } }, "score": 78, "service": "security-headers", "target": "https://example.com", "timestamp": "2025-01-15T12:00:00.000Z", "warnings": [] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "method": { "enum": [ "GET" ], "type": "string" }, "queryParams": { "properties": { "target": { "description": "URL or domain to audit security headers for (e.g. https://example.com)", "type": "string" } }, "required": [ "target" ], "type": "object" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "deductions": { "type": "array" }, "errors": { "type": "array" }, "grade": { "type": "string" }, "meta": { "type": "object" }, "results": { "type": "object" }, "score": { "type": "number" }, "service": { "type": "string" }, "target": { "type": "string" }, "timestamp": { "type": "string" }, "warnings": { "type": "array" } }, "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } }, "tags": [ "security headers check", "http security headers", "csp", "hsts", "website security audit", "bazaar" ], "sourceHost": "netintel.dev", "lastUpdated": "2026-10-11T13:19:26.97Z", "quality": { "calls30d": 6, "uniquePayers30d": 4, "lastCalledAt": "2026-10-11T13:19:26.67Z" }, "metadata": { "serviceName": "NetIntel", "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png", "extensions": { "bazaar": { "info": { "input": { "method": "GET", "queryParams": { "target": "https://example.com" }, "type": "http" }, "output": { "example": { "deductions": [ { "points": -5, "reason": "Permissions-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Resource-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Embedder-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Opener-Policy not set" }, { "points": -3, "reason": "X-Powered-By header exposes server framework" } ], "errors": [], "grade": "B", "meta": { "duration_ms": 312 }, "results": { "anti_patterns": [ { "header": "x-powered-by", "raw_value": "Express", "reason": "Information leakage — reveals server framework", "severity": "warn" } ], "content_type": "text/html; charset=utf-8", "final_url": "https://example.com/", "headers": { "content-security-policy": { "present": true, "raw_value": "default-src 'self'", "reason": "Content-Security-Policy is set with a strong policy", "status": "pass" }, "cross-origin-embedder-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Embedder-Policy not set", "status": "info" }, "cross-origin-opener-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Opener-Policy not set", "status": "info" }, "cross-origin-resource-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Resource-Policy not set", "status": "info" }, "permissions-policy": { "present": false, "raw_value": null, "reason": "Permissions-Policy not set — browser features not restricted", "status": "warn" }, "referrer-policy": { "present": true, "raw_value": "strict-origin-when-cross-origin", "reason": "Referrer-Policy is set to strict-origin-when-cross-origin", "status": "pass" }, "strict-transport-security": { "present": true, "raw_value": "max-age=31536000; includeSubDomains", "reason": "HSTS enabled with max-age=31536000", "status": "pass" }, "x-content-type-options": { "present": true, "raw_value": "nosniff", "reason": "X-Content-Type-Options is set to nosniff", "status": "pass" }, "x-frame-options": { "present": true, "raw_value": "DENY", "reason": "X-Frame-Options is set to DENY", "status": "pass" }, "x-xss-protection": { "present": false, "raw_value": null, "reason": "X-XSS-Protection not set — modern browsers use CSP instead", "status": "info" } }, "status_code": 200, "summary": { "fail": 0, "info": 4, "pass": 6, "warn": 0 } }, "score": 78, "service": "security-headers", "target": "https://example.com", "timestamp": "2025-01-15T12:00:00.000Z", "warnings": [] }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "method": { "enum": [ "GET" ], "type": "string" }, "queryParams": { "properties": { "target": { "description": "URL or domain to audit security headers for (e.g. https://example.com)", "type": "string" } }, "required": [ "target" ], "type": "object" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method" ], "type": "object" }, "output": { "properties": { "example": { "properties": { "deductions": { "type": "array" }, "errors": { "type": "array" }, "grade": { "type": "string" }, "meta": { "type": "object" }, "results": { "type": "object" }, "score": { "type": "number" }, "service": { "type": "string" }, "target": { "type": "string" }, "timestamp": { "type": "string" }, "warnings": { "type": "array" } }, "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "netintel.dev", "manifest_name": "netintel.dev", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "deductions": [ { "points": -5, "reason": "Permissions-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Resource-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Embedder-Policy not set" }, { "points": -2, "reason": "Cross-Origin-Opener-Policy not set" }, { "points": -3, "reason": "X-Powered-By header exposes server framework" } ], "errors": [], "grade": "B", "meta": { "duration_ms": 312 }, "results": { "anti_patterns": [ { "header": "x-powered-by", "raw_value": "Express", "reason": "Information leakage — reveals server framework", "severity": "warn" } ], "content_type": "text/html; charset=utf-8", "final_url": "https://example.com/", "headers": { "content-security-policy": { "present": true, "raw_value": "default-src 'self'", "reason": "Content-Security-Policy is set with a strong policy", "status": "pass" }, "cross-origin-embedder-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Embedder-Policy not set", "status": "info" }, "cross-origin-opener-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Opener-Policy not set", "status": "info" }, "cross-origin-resource-policy": { "present": false, "raw_value": null, "reason": "Cross-Origin-Resource-Policy not set", "status": "info" }, "permissions-policy": { "present": false, "raw_value": null, "reason": "Permissions-Policy not set — browser features not restricted", "status": "warn" }, "referrer-policy": { "present": true, "raw_value": "strict-origin-when-cross-origin", "reason": "Referrer-Policy is set to strict-origin-when-cross-origin", "status": "pass" }, "strict-transport-security": { "present": true, "raw_value": "max-age=31536000; includeSubDomains", "reason": "HSTS enabled with max-age=31536000", "status": "pass" }, "x-content-type-options": { "present": true, "raw_value": "nosniff", "reason": "X-Content-Type-Options is set to nosniff", "status": "pass" }, "x-frame-options": { "present": true, "raw_value": "DENY", "reason": "X-Frame-Options is set to DENY", "status": "pass" }, "x-xss-protection": { "present": false, "raw_value": null, "reason": "X-XSS-Protection not set — modern browsers use CSP instead", "status": "info" } }, "status_code": 200, "summary": { "fail": 0, "info": 4, "pass": 6, "warn": 0 } }, "score": 78, "service": "security-headers", "target": "https://example.com", "timestamp": "2025-01-15T12:00:00.000Z", "warnings": [] } }