About this bot
SecurityHeaders is the SecurityHeaders.com scanner for user-requested HTTP response-header security analysis.
Its modern Chrome-style scanner UA contains the static `SecurityHeaders` marker, and the service publishes its scanning IP.
Directory status: Active. Identity classification: Verified with High confidence. Identity type: official-documented.
These are explicit target scans rather than robots-governed general crawling.
Use the published scanner network to corroborate the UA when necessary.
How to identify this bot
- User-agent and crawler identifiers
-
SecurityHeadersMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 SecurityHeaders
Details
- Kind
- Scanner
- Family
- SecurityHeaders
- Purpose
- HTTP response header security scan
- Common Use
- User-triggered scanning of a target URL’s HTTP response headers and redirect behavior for security grading.
- Respects robots.txt
- No
Verification
- Identity Type
- Officially documented
- Evidence Method
- Match the static `SecurityHeaders` marker inside the scanner’s modern Chrome User-Agent and corroborate with the scanner IP published by the service.
- Detection Notes
- SecurityHeaders explicitly documents both the static UA marker and its scan source IP.
Website controls
- Robots.txt Snippet
# robots.txt is not a reliable control for this identity. Use server-side access controls if restriction is required.- Apache Rule
SetEnvIfNoCase User-Agent "SecurityHeaders" bot_match- Nginx Rule
if ($http_user_agent ~* "SecurityHeaders") { set $bot_match 1; }