AUDIT
Site response headers
Run a same-origin HEAD request in your browser and inspect the headers actually returned. No automatic grade or certification.
What this check does
The interactive page sends a same-origin HEAD request to the site homepage without cookies, then shows the response-header values returned to that browser at that moment.
What it does not prove
A present header is not automatically secure and an absent header is not automatically a vulnerability. This is not a penetration test, dependency scan, TLS audit, DNS audit, or privacy certification.
You can independently compare the result with curl -I https://theydidntask.com/.