MDN HTTP Observatory
HTTP Observatory scans a public site and explains header-level protections and configuration findings with links to practical guidance.
Limitations: A score covers only observable web configuration. It does not test application authorization, source code, accounts, malware, or organizational security.
Why it is useful
HTTP Observatory scans a public site and explains header-level protections and configuration findings with links to practical guidance. This resource is especially useful for Reviewing public HTTP security headers and related website configuration. Review the current instructions and limitations from Mozilla and MDN before relying on it for important work.
Limitations
A score covers only observable web configuration. It does not test application authorization, source code, accounts, malware, or organizational security.