How safe are your website's security headers?

Enter a website address. We check six key security settings and give it a grade, with simple steps to fix anything missing.

We only read the public response headers — the same thing any browser sees. Nothing is stored.