Tools ranked by security headers

Tools ranked by the security headers their websites send. Checked automatically, re-checked every week, never paid for.

The letter grades the security headers a tool’s website sends, out of 100.

The bar under each tool is the nine checks, sized by weight: filled when the header is there, empty when it is missing. Missing headers open the door to man-in-the-middle attacks, malicious JavaScript, redirected forms and hijacked payments. How each one works, and how buyers put this in an RFP.

  1. Grade A, 90 out of 100.

    Raycast raycast.com

    Keyboard launcher replacing Spotlight, with clipboard history, window management, and extensions for Linear, GitHub, Slack.

    productivity-notes · 7 of 9 headers · checked 2026-10-04

  2. Grade B, 80 out of 100.

    Linear linear.app

    Issue tracking that stays fast under keyboard-only use, with cycles and triage small teams actually maintain.

    productivity-notes · 6 of 9 headers · checked 2026-10-04

  3. Grade C, 65 out of 100.

    Notion notion.com

    Docs, wikis and databases in one workspace, built from nestable pages and blocks, with real-time collaboration and templates.

    productivity-notes · 4 of 9 headers · checked 2026-10-07

  4. Grade C, 65 out of 100.

    Obsidian obsidian.md

    Notes stay local Markdown files you own, with backlinks and plugins covering almost any workflow.

    productivity-notes · 6 of 9 headers · checked 2026-10-04

Know a tool that belongs here? Add it and its website is scanned when it is listed.