About · est. 2026
In April 2026 SecurityHeaders.com switched off its public API. Thousands of pentesters and developers lost the one free thing that checked headers programmatically. What replaced it was either an enterprise SaaS contract or a half-maintained repo. SecureScanr is what I built instead — for my own client work first, then for everyone else's.
The default free header checker stops being scriptable. CI pipelines and client-report workflows built on it stop working.
A scanner I needed for my own pentest deliverables: headers, plus the things a header checker never covered — TLS, DNS email security, cookies.
Fourteen dimensions, an A–F grade, and the exact fix for every failing check. It scores B 78/100 on its own scan — the remaining gaps are listed in the methodology, not hidden.
No VC funding, no team, no growth hacks. One person who needed the tool.
I built SecureScanr because I needed it for client work, and because the alternatives either cost more than the job paid or demanded an account and a credit card before showing a single result.
It stays a solo project. That is a constraint, not a pitch: it means the scoring is one person's published arithmetic, the roadmap is short, and every email reaches the person who wrote the scanner.
Free scans need no account, no email, no API key. Paste a URL.
Scan results aren't stored. The only things kept are API keys and quota for Pro subscribers.
Every deduction is listed on the methodology page. Re-run a scan and the arithmetic is identical.
India pays in rupees via Razorpay; everywhere else in USD. No conversion charges to work around.
It measures hardening, not exploitability. SQL injection, broken auth and logic flaws are out of scope.
Scans run when asked. Scheduled scanning across client domains is the Agency tier, not the default.
Vanilla HTML, CSS and JavaScript on the front — no framework, no build step
Bugs, feature requests, or a scan that returned the wrong result — I read every message.
API access & PDF export
Plans →Checkout routes automatically to the right payment option for your location.