Security headers
HTTP headers that harden websites — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
Tool: securityheaders.com grades your site A-F. Free 5-minute security bump. Cloudflare and similar proxies can inject automatically. The classic "easy win" on security audits.