Hey folks I'm Zaid, I work in pentesting/SOC and got tired of manually checking security headers every time I needed a quick read on a site, so I built a small Chrome extension to do it in one click.
What it does: click the icon on any page, and it reads the live response headers (CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and a few more) plus cookie flags (Secure/HttpOnly/SameSite), then grades the site A–F with a plain-English explanation and fix for anything missing or weak. Everything runs client-side — no server, no data collected.
Built it mainly for other pentesters and devs who want a fast first-pass check before writing up a report, or just want to sanity-check their own site's headers before shipping. Would genuinely love feedback from anyone who tries it, especially if the grading logic feels off for any real-world site you test it on.
https://mozaid.itch.io/headerguard-security-header-cookie-scanner-chromebrave-ex...