It checks:
- HTTPS redirects - SSL certificate validity - Mixed content - basic security headers - HTTP/3 support
I’d appreciate any feedback, bug reports, or thoughts on what’s missing or misleading.