60-second check: is your website sending these?
DevTools > Network > reload > click your page > Headers:
• Content-Security-Policy
• Strict-Transport-Security
• X-Content-Type-Options
Missing any? That's where a security review starts:
circuitcipher.dev