Hardening Tool

Security Headers Checker

Checks HSTS preload status, HTTP security headers (where CORS permits), DNS email authentication, DNSSEC validation, and CAA certificate controls for any domain.

Checks HSTS preload status (hstspreload.org), DNS email security, DNSSEC, and CAA records. Some checks attempt a direct connection — results vary by CORS policy.