TLS / Security-Headers Scanner
Live TLS + Headers · Zero MLReal certificate + security-header audit, Mozilla-Observatory-style — SSRF-hardened
Type a domain. A real TLS handshake checks its certificate (chain verification, expiry, protocol version), and a live HTTPS request checks for 6 standard security headers — the same checklist Mozilla Observatory uses. Private/internal addresses are refused, not scanned.