Type a public http or https URL. The report shows every security header the server actually sends — or does not send — and what to do about it.
Note: Hosts behind Cloudflare may report as unreachable — the checker cannot open a connection back into Cloudflare's own network. If a site you know is up returns "cannot connect", that is a limitation of the checker platform, not your server.
Headergrade