Header Radar per GabriPhil

A quick read of the security posture a site advertises in its response headers. Every check says what the value means rather than just pass or fail: how long HSTS actually lasts, whether a CSP still allows inline script, whether frame-ancestors super