SSL & Header Inspector

Audit TLS certificates and HTTP security headers for any public domain.

Only public domains are accepted. Private IPs, localhost, and internal hostnames are blocked server-side via SSRF protection.