passlisted in Coinbase#14 by calls of 125 on this host
0.01 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- 6
- Unique payers, trailing 30 days
- 4
- Last called
- 2026-10-11 13:19 UTC
- First observed by TOLLderived
- 2026-09-10
- Pricederived
- 0.01 USDC
- Networks
- 2
How has the volume on this endpoint moved?
netintel.dev lists 125 endpoints; security headers analyze is tied 14th by calls with 3 others.
Its declared inputs are the query parameter target.
A response from security headers analyze, as declared, includes meta, grade, score, errors, target, results and 2 others.
Over 30 days: 6 calls, 4 payers.
security headers analyze was last called 2 days before the snapshot.
It is priced at 0.01 USDC on Base.
security headers analyze accepts payment on Base and Solana, 2 options in all, to 2 different wallets.
netintel.dev serves security headers analyze, a GET endpoint that TOLL places in the "other" category, listed in the Coinbase registry.
security headers analyze answered the sweep of 2026-10-28 with a valid 402, as at every sweep since 2026-09-11.
Closest in price to security headers analyze within the "other" category: world cup get schedule at machina.pay.zeroclick.io and fetch at x402.browserbase.com.
security headers analyze is priced above 55% of comparable listings in the "other" category.
security headers analyze out-counts 92% of the 3,825 endpoints in the "other" category that carry counters.
The wallet paid by security headers analyze is the payee of 128 endpoints across 3 hosts.
The seller's tags on security headers analyze are security headers check, http security headers, csp and hsts.
security headers analyze dropped out of the registry at the pull of 2026-09-19 and was listed again on 2026-09-20.
The price of security headers analyze is declared by 1,086 other listings in the "other" category too.
the payment options, as of 2026-10-13 14:08 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.01 USDC | exact | 0xdaDc33…bEb9Df |
| Coinbase | solana: | USDC | 0.01 USDC | exact | 8FVeybWn…wVGr5s |
the checks, as of 2026-10-28 11:29 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-10-28 11:29 UTC | pass | 0 | daily-2026-10-28 |
| 2026-10-27 11:05 UTC | pass | 0 | daily-2026-10-27 |
| 2026-10-23 11:33 UTC | pass | 0 | daily-2026-10-23 |
| 2026-10-21 21:05 UTC | pass | 0 | daily-2026-10-21 |
| 2026-10-19 11:18 UTC | pass | 0 | daily-2026-10-19 |
| 2026-10-16 09:05 UTC | pass | 0 | daily-2026-10-16 |
| 2026-10-15 11:04 UTC | pass | 0 | daily-2026-10-15 |
| 2026-10-14 08:53 UTC | pass | 0 | daily-2026-10-14 |
| 2026-10-13 13:46 UTC | pass | 0 | daily-2026-10-13 |
| 2026-10-12 11:10 UTC | pass | 0 | daily-2026-10-12 |
| 2026-10-11 09:50 UTC | pass | 0 | daily-2026-10-11 |
| 2026-10-10 18:01 UTC | pass | 0 | daily-2026-10-10 |
| 2026-10-09 11:19 UTC | pass | 0 | daily-2026-10-09 |
| 2026-10-08 12:53 UTC | pass | 0 | daily-2026-10-08 |
| 2026-10-07 12:09 UTC | pass | 0 | daily-2026-10-07 |
| 2026-10-06 12:49 UTC | pass | 0 | daily-2026-10-06 |
| 2026-10-05 11:20 UTC | pass | 0 | daily-2026-10-05 |
| 2026-10-04 14:03 UTC | pass | 0 | daily-2026-10-04 |
| 2026-10-03 07:27 UTC | pass | 0 | daily-2026-10-03 |
| 2026-10-02 16:35 UTC | pass | 0 | daily-2026-10-02 |
| 2026-10-01 09:19 UTC | pass | 0 | daily-2026-10-01 |
| 2026-09-30 08:47 UTC | pass | 0 | daily-2026-09-30 |
| 2026-09-29 20:52 UTC | pass | 0 | daily-2026-09-29 |
| 2026-09-23 07:48 UTC | pass | 0 | daily-2026-09-23 |
| 2026-09-22 08:02 UTC | pass | 0 | daily-2026-09-22 |
| 2026-09-21 08:24 UTC | pass | 0 | daily-2026-09-21 |
| 2026-09-19 06:23 UTC | pass | 0 | daily-2026-09-19 |
| 2026-09-17 06:14 UTC | pass | 0 | daily-2026-09-17 |
| 2026-09-16 06:12 UTC | pass | 0 | daily-2026-09-16 |
| 2026-09-15 06:29 UTC | pass | 0 | daily-2026-09-15 |
| 2026-09-14 05:58 UTC | pass | 0 | daily-2026-09-14 |
| 2026-09-13 05:50 UTC | pass | 0 | daily-2026-09-13 |
| 2026-09-12 08:07 UTC | pass | 0 | daily-2026-09-12 |
| 2026-09-11 12:05 UTC | pass | 0 | daily-2026-09-11 |
Presence in a registry, not liveness of the service (method). Newest first.
- back in Coinbase
- absence from Coinbase confirmed, rule v1
- absent from Coinbase at this pull
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-10-11 13:19 UTC · method · live
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"target": "https://example.com"
}
},
"output": {
"type": "json",
"example": {
"meta": {
"duration_ms": 312
},
"grade": "B",
"score": 78,
"errors": [],
"target": "https://example.com",
"results": {
"headers": {
"referrer-policy": {
"reason": "Referrer-Policy is set to strict-origin-when-cross-origin",
"status": "pass",
"present": true,
"raw_value": "strict-origin-when-cross-origin"
},
"x-frame-options": {
"reason": "X-Frame-Options is set to DENY",
"status": "pass",
"present": true,
"raw_value": "DENY"
},
"x-xss-protection": {
"reason": "X-XSS-Protection not set — modern browsers use CSP instead",
"status": "info",
"present": false,
"raw_value": null
},
"permissions-policy": {
"reason": "Permissions-Policy not set — browser features not restricted",
"status": "warn",
"present": false,
"raw_value": null
},
"x-content-type-options": {
"reason": "X-Content-Type-Options is set to nosniff",
"status": "pass",
"present": true,
"raw_value": "nosniff"
},
"content-security-policy": {
"reason": "Content-Security-Policy is set with a strong policy",
"status": "pass",
"present": true,
"raw_value": "default-src 'self'"
},
"strict-transport-security": {
"reason": "HSTS enabled with max-age=31536000",
"status": "pass",
"present": true,
"raw_value": "max-age=31536000; includeSubDomains"
},
"cross-origin-opener-policy": {
"reason": "Cross-Origin-Opener-Policy not set",
"status": "info",
"present": false,
"raw_value": null
},
"cross-origin-embedder-policy": {
"reason": "Cross-Origin-Embedder-Policy not set",
"status": "info",
"present": false,
"raw_value": null
},
"cross-origin-resource-policy": {
"reason": "Cross-Origin-Resource-Policy not set",
"status": "info",
"present": false,
"raw_value": null
}
},
"summary": {
"fail": 0,
"info": 4,
"pass": 6,
"warn": 0
},
"final_url": "https://example.com/",
"status_code": 200,
"content_type": "text/html; charset=utf-8",
"anti_patterns": [
{
"header": "x-powered-by",
"reason": "Information leakage — reveals server framework",
"severity": "warn",
"raw_value": "Express"
}
]
},
"service": "security-headers",
"warnings": [],
"timestamp": "2025-01-15T12:00:00.000Z",
"deductions": [
{
"points": -5,
"reason": "Permissions-Policy not set"
},
{
"points": -2,
"reason": "Cross-Origin-Resource-Policy not set"
},
{
"points": -2,
"reason": "Cross-Origin-Embedder-Policy not set"
},
{
"points": -2,
"reason": "Cross-Origin-Opener-Policy not set"
},
{
"points": -3,
"reason": "X-Powered-By header exposes server framework"
}
]
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-10-13 14:08 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "security headers analyze on netintel.dev", snapshot of 2026-10-13 14:08 UTC. https://tollindex.com/e/netintel-dev-security-headers-analyze-c5b114/at/2026-10-13T14-08Z. Accessed [access date].
BibTeX
@misc{toll-e-netintel-dev-security-headers-analyze-c5b114-2026-10-13T14-08Z,
author = {TOLL},
title = {security headers analyze on netintel.dev},
howpublished = {\url{https://tollindex.com/e/netintel-dev-security-headers-analyze-c5b114/at/2026-10-13T14-08Z}},
year = {2026},
month = {10},
note = {Pinned view of the snapshot of 2026-10-13 14:08 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.