Grade the security headers
a site sends.

One grade from A+ to F, a card per header with the exact line to send, and a generator that writes the missing ones for Apache, nginx, Caddy or Cloudflare.