Security Headers
securityheaders.com
Free HTTP security header scanner that grades websites and explains what each missing header protects against — actionable before deployment.
Why it is useful
Most security headers are opt-in and quietly absent from the majority of websites. Security Headers gives an immediate grade and specific remediation for each missing header — CSP, HSTS, X-Frame-Options, and others. Essential before deploying any public site.