Security Headers Scanner

Grades any site's HTTP security headers — CSP, HSTS, X-Frame-Options, and more — with weighted scoring and per-header explanations. Fetching happens server-side, hardened against SSRF (private/reserved IP blocking, standard ports only, redirect revalidation).