Usage: /security-headers?url=https://example.com