Tool
Security Headers
Public checking of HTTP security headers with contextual interpretation.
What the tool evaluates
The tool checks for headers such as Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, and Referrer-Policy.
Important limitation
A high grade does not prove an application is secure. Headers reduce specific classes of risk but do not replace code review, proper authentication, session management, access control, or vulnerability remediation.