Security Headers Checker

Scan a site's HTTP security headers — HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy — and get a letter grade with recommendations.