Saylor Innovations Audits
HTTP security header audit for any URL - HSTS, CSP, clickjacking, referrer policy, cookies and a letter grade
Offering
- Provider
- saylorinnovations.com
- Method
- GET
- Offering type
- Api Endpoint
- Transport type
- http
- Category
- Security
- Delivery
- Not provided
- Pricing model
- Not provided
- x402 version
- 2
Endpoint context
- URL
https://saylorinnovations.com/api/audit/headers- MIME type
- Not provided
- First seen
- 2026-10-16T01:51:51.176Z
- Last seen
- Tags
- http headers, security headers, csp hsts, security audit, web security
Payment pricing
x402 payment terms are the authoritative price for calling this endpoint.
- Payment option 1
- 0.01 USDC
Atomic price: 10000 · Network: eip155:8453 · Asset: USDC · Scheme: exact - Payment option 2
- 0.01 USDC
Atomic price: 10000 · Network: solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · Asset: USDC · Scheme: exact
Raw x402 terms
[
{
"scheme": "exact",
"network": "eip155:8453",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "10000",
"payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa"
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "10000",
"payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7"
}
]Observed health
- Status
- Healthy
- Latest latency
- 188 ms
- Average latency
- 818 ms
- HTTP status
- 402
- Last checked
- Reachability
- 100% over 7 checks
Latency is measured to the first response headers. A reachable result does not verify response accuracy or merchant identity.
Input schema
{
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"POST",
"PUT",
"PATCH",
"DELETE",
"HEAD"
],
"type": "string"
},
"queryParams": {
"properties": {
"url": {
"description": "Public http(s) URL or bare domain to audit; private, loopback and link-local addresses are refused",
"examples": [
"https://example.com",
"github.com"
],
"maxLength": 2000,
"pattern": "^(https?://)?[A-Za-z0-9.-]+\\.[A-Za-z]{2,}.*$",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
}Output schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"POST",
"PUT",
"PATCH",
"DELETE",
"HEAD"
],
"type": "string"
},
"queryParams": {
"properties": {
"url": {
"description": "Public http(s) URL or bare domain to audit; private, loopback and link-local addresses are refused",
"examples": [
"https://example.com",
"github.com"
],
"maxLength": 2000,
"pattern": "^(https?://)?[A-Za-z0-9.-]+\\.[A-Za-z]{2,}.*$",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"checked_at": {
"description": "Time the check was run (UTC)",
"type": [
"string",
"null"
]
},
"findings": {
"description": "One entry per header or check",
"items": {
"properties": {
"detail": {
"description": "What was observed",
"type": "string"
},
"fix": {
"description": "Recommended header value or action, or null",
"type": [
"string",
"null"
]
},
"header": {
"description": "Header or check name",
"type": "string"
},
"status": {
"description": "pass, warn, fail or info",
"type": "string"
}
},
"type": "object"
},
"type": "array"
},
"grade": {
"description": "Letter grade A to F",
"type": "string"
},
"http_status": {
"description": "HTTP status code returned",
"type": [
"number",
"null"
]
},
"https": {
"description": "True when the final URL is HTTPS",
"type": "boolean"
},
"redirects": {
"description": "Redirect chain followed",
"type": [
"number",
"null"
]
},
"scope": {
"description": "Scope the result covers",
"type": [
"string",
"null"
]
},
"score": {
"description": "Score from 0 to 100 (penalties per missing or weak header)",
"type": "number"
},
"summary": {
"description": "Counts of failing, warning and passing checks",
"type": "object"
},
"url": {
"description": "Final URL after redirects that was audited",
"type": "string"
}
},
"required": [
"url",
"grade",
"score",
"findings"
],
"type": "object"
},
"type": {
"const": "json",
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}