Security header scanner
Grade any site's HTTP security posture — a deep Content-Security-Policy evaluator, cookie, TLS, email/DNS and WHOIS checks, and copy-paste fixes for every finding.
We fetch only the response headers from our server (never stored), with strict SSRF protection. Works on any public site.