DOpen Data Tools
Web · Security

SSL and security headers check

Check a website's SSL certificate expiry and its HTTP security headers (HSTS, CSP, X-Frame-Options and more) with a grade. Free, no sign-up.

✓
Grade Bgithub.com · certificate 74 days left · 5 issue(s)
Hostgithub.com
GradeB
Certificate expires2027-01-27T23:59:59Z
Days left74
IssuerSectigo Limited
TLSTLSv1.3
Issues
  • LOW · permissions-policyPermissions-Policy header is missing. Fix: Permissions-Policy: camera=(), microphone=(), geolocation=()
  • LOW · set-cookie1 of 3 cookies have no HttpOnly flag. Fix: Add '; HttpOnly' to cookies that JavaScript does not need to read.
  • LOW · cross-origin-embedder-policyCross-Origin-Embedder-Policy header is missing. Fix: Cross-Origin-Embedder-Policy: require-corp
  • LOW · cross-origin-opener-policyCross-Origin-Opener-Policy header is missing. Fix: Cross-Origin-Opener-Policy: same-origin
  • LOW · cross-origin-resource-policyCross-Origin-Resource-Policy header is missing. Fix: Cross-Origin-Resource-Policy: same-site

Need this in bulk or inside your app?

The same data as an API: JSON, lists of hundreds of items, history and "only new" monitoring. Pay per use, free trial on the markets.

Example API request
curl -X POST https://radarbg.com/x402/security-headers-ssl-check \
  -H "Content-Type: application/json" \
  -d '{"hosts": ["example.com"]}'
# answers 402 with the price; any x402 client pays per call in USDC on Base

Questions

What is checked?

TLS certificate (issuer, expiry, hostname) and the main security headers.

Can it warn me before expiry?

Yes, the API can watch many sites and report certificates about to expire.

Does it scan for vulnerabilities?

No, only certificate and headers. Our Security Scan API matches software versions to CVEs.

More free tools

EU VAT number checkHS code lookupVIN recall checkMortgage rates todayCentral bank interest ratesUS gas prices by stateUS Treasury yield curveDMARC, SPF and MX checkerLink preview checker