CORS & HTTP Security Header Auditor

Analyze a web server's HTTP response headers for missing security protections (CSP, HSTS, XFO, CORS configuration, and software disclosures).