Tools ranked by security headers

Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.

The letter grades the security headers a tool’s website sends, out of 100.

The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.

  1. Grade F, 25 out of 100.

    PostHog posthog.com

    Product analytics, session replay, and feature flags in one tool with a free tier that lasts.

    analytics · 2 of 9 headers · checked 2026-10-04

  2. Grade F, 20 out of 100.

    Trending TikTok Songs trendingtiktoksongs.com

    Free Popular and Viral TikTok song charts across nine countries, with song and artist search, TikTok usage counts and historical chart movement. Creators can research current music trends and open original sound links without signing up. Independent project, not affiliated with TikTok or ByteDance.

    analytics · 1 of 9 headers · checked 2026-10-09

  3. Grade F, 10 out of 100.

    Plausible Analytics plausible.io

    Cookie-free web analytics in a sub-1KB script, open source, with the whole dashboard on one page.

    analytics · 1 of 9 headers · checked 2026-10-04

Know a tool that belongs here? Add it and its website is scanned when it is listed.