Paste a link. We scan the public page for open doors - HTTPS, cookies, security headers - then email you the score.
Public headers and HTTPS - not a pentest. Honest signal, then you decide.