Feature request
OWASP-style checks
Main idea
We keep finding cookies without Secure or HttpOnly, open directory listings, and a public .git folder. A repeatable set of those checks, run with the rest of the site, would replace a spreadsheet we update by hand.