01Identifies missing HSTS and X-Frame-Options to prevent SSL stripping and clickjacking
02Provides severity-rated findings with actionable PHP code fixes
03Detects missing or weak Content Security Policy (CSP) directives
04Analyzes Referrer-Policy and Permissions-Policy for data privacy compliance
0545 GitHub stars
06Audits sensitive routes for insecure Cache-Control headers