Loading…
One guarded request fetches the headers; your browser does all the grading. Each header gets its own verdict, what it protects against, and how to fix it — because a letter grade that hides WHICH protection is missing helps nobody.
Our server makes one request to the address you name (redirects followed, public hosts only) and returns the headers. The grading happens in your browser; nothing is stored or logged.
Type or paste a public web address. Nothing about your own files or device is involved — only the page you name.
This is one of the few Programs tools that can’t run on your device — browsers deliberately can’t read other websites. Our server fetches the page and sends the result straight back: nothing is stored, and the address is never logged or put into analytics.
Take the result to your clipboard, or save it as a file. No copy is kept on our side — there is no storage for one to sit in.