Web security

HTTP security-headers scan

Paste any public URL. We fetch it and grade the response headers against the browser-side defenses that prevent clickjacking, XSS, and downgrade attacks.