105 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Change watch for response header server timing: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that chan...
Change watch for response header x ua compatible: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that ch...
Change watch for response header content length: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that cha...
Change watch for response header connection: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed...
Change watch for response header date: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that changed with...
HSTS check: the Strict-Transport-Security header on the site (max-age, includeSubDomains, preload), whether it meets Chrome preload-list requirements, and the domain's current status in the HSTS preload list (hstspreload...
HTTP compression check: whether a page is served with gzip, brotli or zstd, the content-encoding actually negotiated, transfer size vs decoded size where available, and the vary header. Performance sanity check for any s...
CORS check for a URL: sends a request with an Origin (and a preflight OPTIONS) and reports Access-Control-Allow-Origin/Methods/Headers/Credentials, whether the origin is allowed, wildcard use, and the risky combination o...
website trust report from a direct HTTPS fetch: status, response headers, HSTS, CSP and clickjacking protection signals.