Security Report Card

A Report Card for your Website's Cybersecurity.

Security Report Card gives your website an instant, honest security grade. Click the icon and it inspects the current page's live response headers, stored cookies, and page DOM right in your browser, then hands back a letter grade (A+ to F) for a list of security checks plus an overall score. BENEFITS Know where you actually stand. No vague "looks secure" guesswork, just a graded breakdown you can act on. Prioritize what matters. Each finding is weighted, so you see whether a missing header is a critical gap or a minor nice-to-have. Prove improvement to yourself or your team. The saved history and trend chart turn "we hardened the site" into a visible before and after. Nothing to configure. No accounts, no API keys, no dashboards to set up. Click the icon and read the card. Nothing leaves your browser. No data is sent to any third-party server, so it's safe to point at internal, staging, or client sites. FEATURES Multi-point security audit. HTTPS, HSTS, CSP, clickjacking protection, MIME-sniffing protection, Referrer-Policy, Permissions-Policy, cross-origin isolation, cookie flags, mixed content, Subresource Integrity, form/credential safety, and server info leakage. Plain-English findings. Every grade comes with the exact header value or DOM evidence behind it, not just a score. Save report cards over time. Build a per-domain history to track hardening progress across scans. Progress chart. A visual trend line showing score changes between saved scans, with the point change called out. One-click PNG export. Export the full report card as an image to share or archive. DISCLAIMER This extension evaluates only what your browser can directly observe: the current page's response headers, its DOM, and cookies stored for that domain. It does not perform penetration testing, vulnerability scanning, or any form of active exploitation, and a high grade is not a guarantee that a site is free of security vulnerabilities. Some checks may be marked "N/A" when the underlying data cannot be verified, and are excluded from the overall score in those cases. This tool is intended for informational and educational purposes only and should not be your sole basis for security decisions.