Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.
A85
The letter grades the security headers a tool’s website sends, out of 100.
The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.