Checking which HTTP security headers a site sends and what they protect against
Using curl and browser DevTools to check for HSTS, CSP, and other security headers.