Paste your URL to test HTTPS, HSTS, Content Security Policy, nosniff and clickjacking protection, and whether your source maps are public.
Read the step-by-step guide, or run the full launch check to test everything at once, including leaked API keys and exposed .env files.