{"id":"7121a74c-2318-474f-80e0-019e66395739","url":"https://netintel.dev/security-headers/analyze?target=https%3A%2F%2Fexample.com","method":"GET","fingerprint":"626876bce35613bc69e5b8ce4289ef83de0510916cc24fa6fc8ca70cfb809845","name":"NetIntel","description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.010000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453","solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"],"pay_to":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"target":{"type":"string","description":"URL or domain to audit security headers for (e.g. https://example.com)"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"meta":{"type":"object"},"grade":{"type":"string"},"score":{"type":"number"},"errors":{"type":"array"},"target":{"type":"string"},"results":{"type":"object"},"service":{"type":"string"},"warnings":{"type":"array"},"timestamp":{"type":"string"},"deductions":{"type":"array"}}}}},"schema_completeness":0,"status":"degraded","first_seen_at":"2026-08-23 12:30:36.104016+00","last_seen_at":"2026-08-23 16:37:42.478+00","last_success_at":"2026-09-14 12:26:30.904+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 12:31:30.904+00","search_tsv":"'netintel':1","catalog_number":"942","x402_version":2,"resource_url":"https://netintel.dev/security-headers/analyze","resource_description":"Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"target":"https://example.com"}},"output":{"type":"json","example":{"meta":{"duration_ms":312},"grade":"B","score":78,"errors":[],"target":"https://example.com","results":{"headers":{"referrer-policy":{"reason":"Referrer-Policy is set to strict-origin-when-cross-origin","status":"pass","present":true,"raw_value":"strict-origin-when-cross-origin"},"x-frame-options":{"reason":"X-Frame-Options is set to DENY","status":"pass","present":true,"raw_value":"DENY"},"x-xss-protection":{"reason":"X-XSS-Protection not set — modern browsers use CSP instead","status":"info","present":false,"raw_value":null},"permissions-policy":{"reason":"Permissions-Policy not set — browser features not restricted","status":"warn","present":false,"raw_value":null},"x-content-type-options":{"reason":"X-Content-Type-Options is set to nosniff","status":"pass","present":true,"raw_value":"nosniff"},"content-security-policy":{"reason":"Content-Security-Policy is set with a strong policy","status":"pass","present":true,"raw_value":"default-src 'self'"},"strict-transport-security":{"reason":"HSTS enabled with max-age=31536000","status":"pass","present":true,"raw_value":"max-age=31536000; includeSubDomains"},"cross-origin-opener-policy":{"reason":"Cross-Origin-Opener-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-embedder-policy":{"reason":"Cross-Origin-Embedder-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-resource-policy":{"reason":"Cross-Origin-Resource-Policy not set","status":"info","present":false,"raw_value":null}},"summary":{"fail":0,"info":4,"pass":6,"warn":0},"final_url":"https://example.com/","status_code":200,"content_type":"text/html; charset=utf-8","anti_patterns":[{"header":"x-powered-by","reason":"Information leakage — reveals server framework","severity":"warn","raw_value":"Express"}]},"service":"security-headers","warnings":[],"timestamp":"2025-01-15T12:00:00.000Z","deductions":[{"points":-5,"reason":"Permissions-Policy not set"},{"points":-2,"reason":"Cross-Origin-Resource-Policy not set"},{"points":-2,"reason":"Cross-Origin-Embedder-Policy not set"},{"points":-2,"reason":"Cross-Origin-Opener-Policy not set"},{"points":-3,"reason":"X-Powered-By header exposes server framework"}]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"target":{"type":"string","description":"URL or domain to audit security headers for (e.g. https://example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"meta":{"type":"object"},"grade":{"type":"string"},"score":{"type":"number"},"errors":{"type":"array"},"target":{"type":"string"},"results":{"type":"object"},"service":{"type":"string"},"warnings":{"type":"array"},"timestamp":{"type":"string"},"deductions":{"type":"array"}}}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","scheme":"exact","network":"eip155:8453","amountAtomic":"10000"},{"raw":{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"payTo":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300},"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","amountAtomic":"10000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 12:26:30.904+00","bazaar_validation_error":null,"window":"24h","probes_n":48,"handshake_uptime":0.9166667,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":624,"latency_p90":1206,"price_drift_pct":0,"score":0.7516,"computed_at":"2026-09-14 12:26:55.027+00","source_metadata":[{"raw":{"url":"https://netintel.dev/security-headers/analyze?target=https%3A%2F%2Fexample.com","name":"NetIntel","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"626876bce35613bc69e5b8ce4289ef83de0510916cc24fa6fc8ca70cfb809845","advertisedPriceUsd":0.01},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://netintel.dev/security-headers/analyze","resource_description":"Fetches a URL and evaluates 10 security-critical response headers (CSP, HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, CORP, COEP, COOP), detects anti-patterns, and returns an overall security grade (A–F).","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"target":"https://example.com"}},"output":{"type":"json","example":{"meta":{"duration_ms":312},"grade":"B","score":78,"errors":[],"target":"https://example.com","results":{"headers":{"referrer-policy":{"reason":"Referrer-Policy is set to strict-origin-when-cross-origin","status":"pass","present":true,"raw_value":"strict-origin-when-cross-origin"},"x-frame-options":{"reason":"X-Frame-Options is set to DENY","status":"pass","present":true,"raw_value":"DENY"},"x-xss-protection":{"reason":"X-XSS-Protection not set — modern browsers use CSP instead","status":"info","present":false,"raw_value":null},"permissions-policy":{"reason":"Permissions-Policy not set — browser features not restricted","status":"warn","present":false,"raw_value":null},"x-content-type-options":{"reason":"X-Content-Type-Options is set to nosniff","status":"pass","present":true,"raw_value":"nosniff"},"content-security-policy":{"reason":"Content-Security-Policy is set with a strong policy","status":"pass","present":true,"raw_value":"default-src 'self'"},"strict-transport-security":{"reason":"HSTS enabled with max-age=31536000","status":"pass","present":true,"raw_value":"max-age=31536000; includeSubDomains"},"cross-origin-opener-policy":{"reason":"Cross-Origin-Opener-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-embedder-policy":{"reason":"Cross-Origin-Embedder-Policy not set","status":"info","present":false,"raw_value":null},"cross-origin-resource-policy":{"reason":"Cross-Origin-Resource-Policy not set","status":"info","present":false,"raw_value":null}},"summary":{"fail":0,"info":4,"pass":6,"warn":0},"final_url":"https://example.com/","status_code":200,"content_type":"text/html; charset=utf-8","anti_patterns":[{"header":"x-powered-by","reason":"Information leakage — reveals server framework","severity":"warn","raw_value":"Express"}]},"service":"security-headers","warnings":[],"timestamp":"2025-01-15T12:00:00.000Z","deductions":[{"points":-5,"reason":"Permissions-Policy not set"},{"points":-2,"reason":"Cross-Origin-Resource-Policy not set"},{"points":-2,"reason":"Cross-Origin-Embedder-Policy not set"},{"points":-2,"reason":"Cross-Origin-Opener-Policy not set"},{"points":-3,"reason":"X-Powered-By header exposes server framework"}]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"target":{"type":"string","description":"URL or domain to audit security headers for (e.g. https://example.com)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"meta":{"type":"object"},"grade":{"type":"string"},"score":{"type":"number"},"errors":{"type":"array"},"target":{"type":"string"},"results":{"type":"object"},"service":{"type":"string"},"warnings":{"type":"array"},"timestamp":{"type":"string"},"deductions":{"type":"array"}}}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df","scheme":"exact","network":"eip155:8453","amountAtomic":"10000"},{"raw":{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"feePayer":"GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"},"payTo":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","amount":"10000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":300},"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","payTo":"8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","amountAtomic":"10000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 12:26:30.904+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.7516,"uptime":0.9166667,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":624,"latency_p90":1206,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}