Which security headers does your website send?
Six headers that decide how browsers treat your pages, each explained in terms you can hand to whoever maintains the site. No account and no email address.
What this does not tell you
Headers are one layer. A site can send every one of these and still have problems in its code, its dependencies, or its hosting — and a site missing several may be perfectly safe for what it does. This is a checklist, not a security audit, and it is not a statement about whether you comply with any particular privacy law.
Find what is costing you search clicks, then watch the fix work.
VisitorPing reads your own Search Console data for the pages losing clicks, then rings your phone the moment someone lands on your website.