# Header Watch: Security Monitor — CSP, HSTS & HTTPS Site Alerts

> CSP, HSTS & HTTPS Site Alerts (iPhone/iPad app by Keith Batterham.)

- Source: https://appshunter.io/ios/app/header-watch-security-monitor/id6774599437 (this page in markdown: same URL + `.md`)
- Developer: [Keith Batterham](https://appshunter.io/developer/6774322466)
- Category: Utilities
- Price: Free
- Age rating: 4+
- Requires: iOS 16.4 · 42 MB
- Languages: American English
- Released: 2026-06-02
- Data updated: 2026-08-14
- User reviews in markdown: https://appshunter.io/ios/app/header-watch-security-monitor/id6774599437/reviews.md

## What is Header Watch?

Header Watch keeps a silent eye on the security headers of any website you care about. Drop in a URL, let it scan, and you get a baseline snapshot. From then on, it checks automatically in the background and notifies you the moment anything changes.

Security headers like Content Security Policy, HSTS, X-Frame-Options, and Permissions-Policy are easy to misconfigure during a deployment, a server migration, or a routine update — and just as easy to miss. Header Watch catches the drift so you don't have to.

Add any URL you want to watch. Header Watch fetches the headers, grades them, and stores a baseline. Background checks run every 1, 6, or 24 hours depending on what you set. When something changes you get a push notification with a summary of exactly what was added, removed, or altered.

The drift event log keeps a full history of every change, so you can see precisely when a header was removed or a value was modified. Each watch shows a side-by-side comparison between the baseline and the current state.

Built for developers monitoring their own sites, security engineers keeping tabs on third-party services, or anyone who wants to know the moment a Content Security Policy quietly disappears after a CDN update.

No account required. Everything runs on device.


## Version history (last 5 releases)

### 1.2.2 — 2026-08-13

Refreshed the App Store screenshots to show the current app, plus minor under-the-hood updates.

### 1.2.1 — 2026-08-06

• Fixed: opening a link or QR code from the SecURL command line tool now reliably pre-fills the target when the app is already running
• Minor reliability improvements

### 1.2.0 — 2026-07-26

• New: a per-target timeline on watch detail, showing what changed and when, with plain-English explanations
• New: share a watch straight from the detail screen
• New: policy fit verdicts show whether a site still meets the policy you selected
• Fixed a brief flash of the empty state while your watches were still loading
• Accessibility improvements and reliability fixes

### 1.1.0 — 2026-07-21

• Your watch list now leads with what needs attention first
• See at a glance whether server monitoring is healthy
• Reliability improvements

### 1.0.5 — 2026-07-10

New: a first-launch intro and a Run full SecURL scan action to check a site's full posture on the web. Plus reliability improvements.

## More apps by Keith Batterham

- [SecURL: Website Security Check](https://appshunter.io/ios/app/securl-website-security-check/id6774322464)
- [Cert Watch: SSL Expiry Alerts](https://appshunter.io/ios/app/cert-watch-ssl-expiry-alerts/id6774979236)

All apps by Keith Batterham: https://appshunter.io/developer/6774322466

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-08-14.*