Cybaa
Don't be a sheep - monitor your domains
Start new thread
Joe Tiedeman

Cybaa Security Header API - automate the evaluation of your security http headers

by•
securityheaders.com's API is being retired by Snyk and Probely in April, we've created a replacement to try and carry on Scott Helme's work and allow you to integrate in to your CI/CD pipelines and automated estate compliance scanning.

Add a comment

Replies

Best
Joe Tiedeman
Maker
📌
For many in the web security community, securityheaders.com has been a familiar and trusted tool for years. Originally created by Scott Helme, it helped raise the baseline for HTTP security headers across the web, not through flashy reports, but by making the right things visible and measurable. In April 2025, Probely announced that the Security Headers API will discontinued in April 2026. If you were using it for anything below, you now need an alternative: CI/CD checks Automated estate scanning Compliance evidence Repeated audits without manual effort That’s why I am really excited to announce that alongside our existing services, we’ve released an endpoint to serve as a replacement for the Security Headers API.