We load your homepage from our server and grade the security headers it sends, plus HTTPS and cookie settings.