Security Score Guide
v2.0 scoringHow your headers turn into points, and points turn into a grade.
Excellent security posture
Scanned Domain
secure-transit.org
Present
valid config
Weak
fix needed
Missing
critical
Top Weighted Headers
How Scoring Works
Header Weights
Every security header carries a fixed max point value, weighted by how critical it is.
Config Evaluation
Each header is checked: present & valid scores full points, weak config scores partial, missing scores zero.
Final Aggregation
All header scores are summed out of 100, then mapped onto the A+ through F grade scale.
Header Weights
Grade Scale
Improving Your Score
Priority 1
Fix missing critical headers first — CSP and HSTS carry the most weight.
Priority 2
Strengthen weak configurations rather than leaving partial credit on the table.
Priority 3
Add medium-severity headers like Permissions-Policy and COOP.
Quick Win
Every fixed header moves your score and grade immediately.