HTTP security headers scanner — grade any site A+ to F on HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Fetched live from our server.
We fetch the response headers over HTTP(S) and grade the six key security headers. Redirects are not followed.