Security headers like HSTS, Content-Security-Policy and X-Frame-Options tell browsers how to defend against HTTP downgrade, XSS and clickjacking. Get a graded report with the missing headers and how to fix them.