Observatory
Grades your site's security headers and configuration.
What it does
Observatory inspects how your site is configured at the browser-security level — content security policy, HTTPS enforcement, cookie flags, and other HTTP security headers — and scores each against current best practice.
What data you get
A letter-grade scorecard with a line-by-line breakdown of which protections are present, which are missing, and the exact header change needed to fix each gap.
Why it matters to your site
These headers are a cheap, high-impact layer of defence against common attacks like cross-site scripting and clickjacking. The report turns 'is our config safe?' into a concrete to-do list.
More in this category
Other infrastructure tools
Nuclei
★ FeaturedTemplate-driven scanner for thousands of known vulnerabilities.
Nikto
Long-standing web server scanner for dangerous files and misconfig.
Jaeles
Flexible signature-based scanner for automated vulnerability checks.