Security Headers & SSL Certificate Checker API
Check the security headers and the SSL certificate of up to 50 websites per call. Grade A+ to F with a documented scoring table, every header with a verdict and an exact fix line (HSTS, CSP, frame protection, nosniff, Referrer-Policy, Permissions-Policy, COOP/CORP/COEP, cookie flags, information leaks), plus certificate issuer, SANs, days left, hostname match, trust verdict, key and signature, and the TLS versions the server accepts. Monitor mode returns only hosts whose grade dropped, whose header disappeared or whose certificate changed. A host that cannot be reached returns an error code, never a false 'header missing'.
Example request
curl -X POST https://radarbg.com/v1/security-headers-ssl-check \
-H "X-API-Key: YOUR_KEY" -H "Content-Type: application/json" \
-d '{"hosts": ["github.com", "example.com", "google.com"], "certWarnDays": 30, "onlyNew": false, "monitorId": "default"}'
Answer: {"ok": true, "count": N, "items": [...], "usage": {...}}. Failed calls are not counted.
Inputs
| Field | Type | Description |
|---|---|---|
hosts | array | Websites to check, up to 50 per run. Bare domains (example.com), hosts with a port (example.com:8443) or full URLs (https://example.com/) are accepted. Only the front page you give is requested; private, local and our own addresses are refu |
host | string | Optional shortcut for one website, same as a one-entry Hosts list. Handy for API calls with a single value. |
url | string | Optional shortcut for one URL, for example https://example.com/. Same as a one-entry Hosts list. |
certWarnDays | integer | A certificate that expires in fewer days than this is flagged as expiring soon (expiringSoon true, an issue is added, and monitor mode reports it). Between 1 and 365. |
onlyNew | boolean | Return only hosts whose grade dropped, whose security header disappeared, whose certificate was replaced or that entered the certificate warning window since the last run with this Monitor ID (the first run returns every host). Use it on a |
monitorId | string | Name of the watch list for the changes-only mode, for example my-sites. Each Monitor ID keeps its own memory. |
Price
Included in every plan: 100 calls a month free, then from €9 a month for 3,000 calls across all APIs.