Tools ranked by security headers

Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.

The letter grades the security headers a tool’s website sends, out of 100.

The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.

  1. Grade C, 65 out of 100.

    Docker docker.com

    Builds and runs applications in containers, with Docker Desktop for local development, Compose for multi-container setups and Docker Hub for sharing images.

    developer-tools · 6 of 9 headers · checked 2026-10-20

  2. Grade C, 65 out of 100.

    Visual Studio Code code.visualstudio.com

    Free source code editor for Windows, macOS and Linux, with syntax highlighting, IntelliSense completion, built-in Git, a debugger and a large extensions marketplace.

    developer-tools · 4 of 9 headers · checked 2026-10-18

  3. Grade F, 30 out of 100.

    Vectoree vectoree.ai

    Give your coding agent a backend: models, auth, Postgres and storage behind one key. Skill + CLI + OpenAI-compatible gateway. Pay-as-you-go.

    developer-tools · 3 of 9 headers · checked 2026-10-22

  4. Grade F, 25 out of 100.

    Insomnia insomnia.rest

    Open source API client for designing and testing REST, GraphQL, gRPC and WebSocket requests, with environments, collections and a local storage option.

    developer-tools · 2 of 9 headers · checked 2026-10-21

Know a tool that belongs here? Add it and its website is scanned when it is listed.