Free Tool
Security Header Analyzer
Grades a site's key HTTP security headers (HSTS, CSP, X-Frame-Options, and more).
This is the one tool on this page that runs server-side: the server fetches the URL you provide to read its response headers, with SSRF protections (private/internal addresses are blocked) and rate limiting in place. It never reads or stores the page's content, only its headers.