# SecurityHeaders

> SecurityHeaders is a free security scanning service that analyzes HTTP security headers on websites, providing grades and recommendations to improve web security posture and protect against common vulnerabilities.

Source: https://docs.centinelanalytica.com/crawlers/securityheaders

## At a glance

- Operator: [SecurityHeaders](https://darkvisitors.com/agents/securityheaders)
- Type: Security

## How Centinel checks it

- **User agent**: The request calls itself this crawler. Anyone can send the same string.

SecurityHeaders publishes nothing Centinel can check a source against, so a match reports the name and leaves the source unconfirmed. The match tokens, verification domains, and address feeds are not published here.

## Allowing or blocking it

The [crawler object](https://docs.centinelanalytica.com/api/crawlers.md) in the `/validate` response sets `access_allowed` to `true` only for a verified source that your tenant allowlists. A [policy rule](https://docs.centinelanalytica.com/admin/policy.md) can allow or block this crawler by its category, `Security`.

[Back to the crawler catalog](https://docs.centinelanalytica.com/concepts/crawler-catalog.md)

[Crawlers with a source check](https://docs.centinelanalytica.com/crawlers.md)