A simple Python tool to scan websites for common HTTP security headers.
- Manual or bulk URL scanning
- Checks for key HTTP security headers:
- Content-Security-Policy
- Strict-Transport-Security
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
- Permissions-Policy
- Generates individual or bulk log files with scan results
- Python 3.6+
requestslibrary (install withpip install requests)
Clone the repo or download the security_header_scanner.py file and run:
python security_header_scanner.pyWhen prompted:
- Choose
mfor manual mode to scan a single URL - Choose
ffor bulk mode to scan multiple URLs from a file
- Create a file named
url_list.txtin the same folder - Add one URL per line
- DO NOT leave a blank line at the end of the file
Example url_list.txt:
https://example.com
https://github.com
https://google.com
The results will be saved to bulk_scan_report.txt.
- In manual mode: Results saved to
scan_log_<domain>.txt - In bulk mode: All results saved to
bulk_scan_report.txt
Made with ❤️ by Džony