Web Recon

One letter. And exactly what to change. Web Recon grades a website's security posture end to end and tells you, in order, what to fix. You get a grade, the reason behind it, and the single change that raises it most. WHAT IT CHECKS • Transport — HTTPS enforcement, TLS version, legacy protocol support, certificate validity and expiry, key strength, OCSP stapling, the full HSTS policy including preload eligibility, and whether the page pulls anything over plaintext. • Headers — Content-Security-Policy and whether it actually constrains anything, including whether its allowlist can be walked straight through; Subresource Integrity on third-party scripts; MIME sniffing, framing, Referrer-Policy, Permissions-Policy and cross-origin isolation. • Cookies — Secure, HttpOnly and SameSite judged per cookie, plus __Host- and __Secure- prefixes and over-broad Domain scope. • Redirect chain —…