Security header audit
Checks HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy with the exact fix for each gap.
S
siteprobe — one-command website audit CLI
afeldman2.gumroad.comDeveloper Tools
Is this website yours?How claiming works
Zero-dependency Python CLI that audits any website — security headers (HSTS, CSP, XFO), TLS, and SEO basics — and emits a clean, client-ready HTML report in seconds.
About
siteprobe — one-command website audit CLI
siteprobe is a single-command website auditor built for freelancers, agencies, and indie makers who need a fast pre-launch or client-site check without standing up a scanner stack. Point it at a URL and it checks reachability, redirect chains, response time, HTTP security headers (HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), TLS certificate validity and expiry, and SEO essentials (title, meta description, h1, image alt text, robots.txt, sitemap.xml). Every finding is a PASS/WARN/FAIL line with the exact header or fix to add, and the HTML report is polished enough to attach to a client deliverable as-is. It runs offline against any public URL, has zero runtime dependencies beyond Python 3, and exits non-zero on failures so it drops straight into CI as a launch gate. No accounts, no telemetry, no config files — audit the script itself in one sitting.
Updated August 5, 2026✓
Key Features
TLS and SEO checks
Certificate validity and expiry plus title, meta description, h1, alt text, robots.txt and sitemap.xml in one pass.
Client-ready HTML report
Generates a polished report you can attach to freelance deliverables without editing.
CI-friendly
Non-zero exit on failures, zero dependencies, runs anywhere Python 3 does.
♙
Use Cases
- Freelancers and agencies— Run a pre-handoff audit on client sites and attach the HTML report as a deliverable.
- Indie makers pre-launch— Catch missing security headers and SEO gaps the day you ship, not after users do.