Mozilla HTTP Observatory

HTTP Observatory is useful when reviewing the configuration a website exposes to a browser. Its official description focuses on headers and related settings, so its report answers a narrower question than a full application penetration test. Use it for a site you administer and turn findings into configuration work with a retest after changes. A header assessment cannot establish that application logic or account permissions are correct.