Real checks, run live: security headers, TLS/SSL configuration, and exposed services. No signup required.