HTTPBot vs SiteGrade

HTTPBot is a powerful API client and debugger that lets you send HTTP/HTTPs requests, connect to WebSockets, browse and invoke remote MCP servers, inspect JSON & HTML responses, and debug APIs on the go. With HTTPBot, you can - Make requests and view responses from anywhere. - Debug API issues even while away from your terminal. - Work with JSON, HTML, XML, and raw text responses effortlessly. - Collaborate with your team by importing & exporting Postman collections, and by syncing with the Postman API. FEATURES - Powerful request editor provides a GUI for easily editing HTTP, HTTPS & WebSockets requests. - Connect to remote MCP (Model Context Protocol) servers to browse and invoke their tools, prompts, and resources. - Supports all major HTTP methods, including GET, POST, PUT, DELETE, PATCH, HEAD, and OPTIONS. - Automatically highlights JSON, HTML, and XML content for better readability. - View detailed metrics for requests and responses, including size, duration, SSL and more. - Support for OpenAPI/Swagger specs as well as Postman collections & environments, including sync with Postman accounts on the cloud - View request documentation for APIs - Native support for GraphQL requests - edit queries and variables directly, and view schema. - Import & export collections from/to any document storage provider, like iCloud Drive, Dropbox and more. - Supports authentication using Basic, Digest, OAuth 1.0a, OAuth 2.0, JWT and much more. Securely store auth credentials for frequent use. - Save frequently-used variables in environments - Filter & query responses using XPath & JSONPath - Automate your workflows with Shortcuts integration. PRICING HTTPBot is available to download for free, with a risk-free 7-day trial to unlock access to its features. Enjoy full access beyond the trial with a yearly subscription, or a one-time purchase for a lifetime upgrade. All plans unlock the app on all platforms where it is supported. LEGAL Duration & price of each subscription is displayed in the app when upgrading to Pro. Payment will be charged to your iTunes account upon confirmation of purchase. Your subscription will automatically renew unless it is cancelled atleast 24 hours before the end of the current period. You can manage your subscription in your iTunes account settings. Any unused portion of the free trial period is forfeited as soon as a subscription is purchased. Terms of use: https://www.httpbot.io/terms.html Privacy policy: https://www.httpbot.io/privacy.html

SiteGrade checks the security configuration a website serves to browsers, grades it A to F, and explains every finding in plain English with the exact change to make. Type a domain on iPhone or iPad, or share a page straight from Safari, and the answer takes seconds. One purchase also covers Mac. WHAT IT CHECKS Security headers - Content-Security-Policy, including report-only policies - Strict-Transport-Security (HSTS), with max-age and includeSubDomains - X-Content-Type-Options - X-Frame-Options and CSP frame-ancestors - Referrer-Policy - Permissions-Policy - Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy - Server and framework version disclosure - Legacy X-XSS-Protection TLS/SSL certificate - Chain validity, trusted root, self-signed and hostname-mismatch detection - Expiry date, with a warning well before it becomes an outage - Negotiated protocol version, TLS 1.0 through TLS 1.3 Transport - Whether plain HTTP redirects to HTTPS, asked on port 80 directly - The full redirect chain, including cross-host and downgrading hops - Mixed content: the page loads in an isolated web view and every insecure subresource request is recorded, active and passive DNS and email - A, AAAA, CNAME and MX records - SPF and DMARC presence and policy - Reported as information only. DNS and email findings never move the letter grade. EXPLAINED, NOT DUMPED Every finding answers three questions: what it means, why it matters, and how to fix it, with copy-ready nginx and Apache values and a command to confirm the fix landed. There is also a fix prompt written from your own report that you can hand to a coding agent. THE GRADE SHOWS ITS WORK Points, caps and bands come from a rubric published inside the app on a "How grading works" screen, so you can always answer "why a B?". Every finding shows the raw evidence behind it: the header value received, the certificate fields, the DNS answers. FREE AND PRO Checking sites is free and unlimited, and every free check shows the grade and the full finding list. Pro is a one-time purchase, never a subscription. It covers iPhone, iPad and Mac, and it is shareable with your family. Pro unlocks: - Every finding's plain-English explanation, fix snippet and evidence - History, kept on your device and grouped by domain, so a grade has a trend instead of a moment - Compare, so a re-check shows what was fixed, what regressed and what is new - Export of the full report as Markdown or PDF, and the fix prompt PRIVATE BY CONSTRUCTION No accounts, no servers, no analytics, no trackers, no ads. Nothing you check is sent to us, because there is nowhere for it to go. Your reports stay on your device. HONEST ABOUT SCOPE This grade reflects the security configuration a site serves to browsers. It is not a security audit. Every check is passive and read-only: a GET request, one TLS handshake, DNS lookups and one page load, which is the same traffic a browser makes when it opens the page. SiteGrade is built for checking your own site or a site you manage. Terms of Use: https://joneslabs.dev/terms