OpenAI
OpenAI sells API access to its own GPT model family alongside speech, image, and embedding models.
Usage-based per token, metered separately for input, output and cached input, with a cheaper asynchronous batch tier, an intermediate flex tier, and a higher-priced fast tier; some tools billed per call, per minute, or per session.
Proprietary
Appears in 1 guide
Where it ranks
Guides that include OpenAI.
Security headers
What OpenAI's website sends to your browser.
Scanned 2026-08-25. Grade headers B, scoring 75 out of 100.
−
No Content-Security-Policy, so no defence in depth against cross-site scripting
+
Strict-Transport-Security is set
+
X-Content-Type-Options: nosniff is set
+
X-Frame-Options is set
+
Referrer-Policy is set
+
Permissions-Policy is set
+
Cross-Origin-Opener-Policy is set
+
Cross-Origin-Resource-Policy is set
+
No server-version or X-Powered-By disclosure
This is one narrow, automated check of the HTTP response headers on the vendor's own website. It says nothing about how the product itself is built, how it stores your data, or whether it has ever been audited. A good grade here is a small signal that somebody was paying attention.