Tools ranked by security headers

Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.

The letter grades the security headers a tool’s website sends, out of 100.

The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.

  1. Grade D, 40 out of 100.

    Airtable airtable.com

    Spreadsheet-style interface over a relational database, with linked records, grid, kanban and calendar views, forms, and built-in automations.

    database-backend · 3 of 9 headers · checked 2026-10-06

  2. Grade F, 25 out of 100.

    Supabase supabase.com

    Real Postgres with auth, storage, and realtime attached, open source and self-hostable if you outgrow the cloud.

    database-backend · 2 of 9 headers · checked 2026-10-04

  3. Grade F, 5 out of 100.

    TablePlus tableplus.com

    Native database GUI that opens instantly across Postgres, MySQL, SQLite, and Redis, with edit previews before commit.

    database-backend · 1 of 9 headers · checked 2026-10-04

Know a tool that belongs here? Add it and its website is scanned when it is listed.