DS4AI · MISSING

Check a page from what it actually serves.

Enter a URL. This fetches the served response and reads it against the MISSING standard: its client-surface hardening (the security headers a page declares), its findability, its delivery, and what a static check can reach of the rest. It describes what it found. It never calls a site secure.

Only public, already-visible declarations are read, the same response any visitor gets. The fetch is guarded (no private addresses, size and time bounds) and carries no credentials.