Analyze HTTP security headers and grade them A+ to F
Fetches the page server-side (following redirects) and inspects HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookies and information disclosure. No files are stored.