A lightweight, passive check inspired by professional scanners (think mini Burp / Sucuri-style hygiene): TLS, security headers (CSP, HSTS, framing), and basic response heuristics for XSS and SQL error leakage. Built for small businesses improving their posture— not a full penetration test.
Only scan sites you own or have permission to test. Private IPs and localhost are blocked.