Tools ranked by security headers
Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.
The letter grades the security headers a tool’s website sends, out of 100.
The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.
-
Grade C, 65 out of 100.
Bruno usebruno.com
API client that stores collections as plain-text files in your Git repo, no account or cloud sync.
-
Grade C, 55 out of 100.
Postman postman.com
API client for building and sending HTTP, GraphQL and gRPC requests, organized into shareable collections with environments and scripted tests.
Know a tool that belongs here? Add it and its website is scanned when it is listed.