Analyse your HTTP response headers
securityheaders.com