HTTP Observatory

Scans any website for security-relevant HTTP headers and reports a security score.

Webfreeglobal

A web service and open-source tool that scans websites for security-relevant HTTP headers (such as CSP and HSTS) and produces a scored JSON report showing missing or misconfigured headers. Intended for web developers and site reliability/security engineers, it is hosted free by MDN Web Docs and also available as a CLI or self-hosted API server (requires Postgres); scans are rate-limited to one per host per minute.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of HTTP Observatory - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim HTTP Observatory to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether HTTP Observatory (or something else) actually fits.

Try a problem