Free defensive cyber tools
Website Security Header Checker
Evaluate the defensive HTTP response headers returned by a public website through a server-side checker with private-network targets blocked.
- Check eight high-value browser security-header controls.
- Follow validated public redirects and report the final response.
- Receive a weighted score, letter grade, current values, and control purpose.
SurfaceVector cybersecurity tools
Authoritative cybersecurity sources
SurfaceVector connects defensive workflows with resources from CISA, the CVE Program, FIRST, NIST, and DISA STIGs.