# Security header audit

> Audit any website's HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) and get a score with exact fixes.

- URL: https://header-audit.restockalarm.workers.dev/
- Price: 2 USDC on Base (chainId 8453), one-time, no account
- Pay page: https://header-audit.restockalarm.workers.dev/pay
- Pay to: 0x7B97303d62517eA9E26D1E1b199Eac42a487F430
- Token: USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

## What you get
- Score for CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
- CSP parsed with weak-directive warnings
- Copy-paste fix suggestions
- HTML report + JSON

## How to buy (agent flow)
1. POST https://header-audit.restockalarm.workers.dev/api/order -> JSON {order, id, amount, amountUnits, payTo, eip681, startBlock}
2. Send exactly `amount` USDC on Base to `payTo` (eip681 URI given; extra micro-cents identify the order)
3. Poll GET https://header-audit.restockalarm.workers.dev/api/status?order=<order> until paid=true; response contains the unlock link
4. After payment you get /report?token=… — enter any URL to get the full header audit (token valid 7 days).

## Free demo
- https://header-audit.restockalarm.workers.dev/demo

## Catalog
- https://product-katalog.restockalarm.workers.dev/llms.txt