HTTP security headers checker

Grade the security headers your server actually sends — HSTS, CSP, nosniff, frame protection — and see exactly what to add.