{% extends "base.html" %}
{% import "tool_parts.html" as p %}
{% block title %}{% if result %}{{ result.grade }} security grade for {{ url }}{% else %}Free website security check{% endif %}{% endblock %}
{% block desc %}{{ tool.desc }}{% endblock %}
{% block content %}
{{ p.head(tool) }}
{{ p.form(tool, input_value, 'example.com') }}
{{ p.error(error, url) }}
{% if result %}
{% call p.verdict(result.grade, result.grade[0], 'Security grade ' ~ result.grade, result.score ~ '/100 · ' ~ result.findings|length ~ ' finding' ~ ('' if result.findings|length == 1 else 's') ~ (' · server: ' ~ result.server if result.server else ''), result.final_url, checked_at) %}
  <div class="actions" style="align-self:center">
    {% for sev, n in result.counts.items() if n %}<span class="pill {% if sev == 'high' %}err{% elif sev == 'medium' %}warn{% elif sev == 'low' %}info{% endif %}">{{ n }} {{ sev }}</span>{% endfor %}
  </div>
{% endcall %}
<div class="grid g2" style="align-items:start">
  <div class="panel">
    <h3 style="margin-top:0">Security headers</h3>
    <table><tbody>
    {% for h in result.header_rows %}
    <tr>
      <td style="width:34px;text-align:center;font-size:16px"><span class="{{ 'ok' if h.ok else 'err' }}">{{ '✓' if h.ok else '✕' }}</span></td>
      <td><span class="mono">{{ h.name }}</span>{% if not h.ok %}<div class="small muted">{{ h.title }}</div>{% endif %}</td>
      <td style="text-align:right"><span class="pill {{ 'ok' if h.ok else 'err' }}">{{ 'present' if h.ok else 'missing' }}</span></td>
    </tr>
    {% endfor %}
    </tbody></table>
    <h3 style="margin:18px 0 8px">TLS protocol support</h3>
    <div class="actions">
    {% for k, v in result.tls.items() %}<span class="pill {% if v and k in ('TLS 1.0','TLS 1.1') %}err{% elif v %}ok{% elif v is none %}{% else %}info{% endif %}" style="font-size:12.5px;padding:4px 12px">{{ k }} · {{ 'enabled' if v else ('disabled' if v is false else 'unknown') }}</span>{% else %}<span class="muted small">Not an https site, TLS was not tested.</span>{% endfor %}
    </div>
    <p class="small dim" style="margin:10px 0 0">TLS 1.0 and 1.1 should be off; TLS 1.2 and 1.3 on.</p>
  </div>
  <div class="panel">
    <h3 style="margin-top:0">Findings and how to fix them ({{ result.findings|length }})</h3>
    {{ p.findings(result.findings, 'No findings. This site passes every check we run.') }}
  </div>
</div>
{{ p.share(share_url) }}
{{ p.others(tools, tool, url) }}
{% else %}
<div class="grid g3" style="max-width:900px;margin:0 auto">
  <div class="panel"><h3 style="margin-top:0">What we check</h3><p class="small muted" style="margin:0">Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie Secure / HttpOnly / SameSite flags, TLS 1.0 – 1.3 support and version-leaking headers.</p></div>
  <div class="panel"><h3 style="margin-top:0">How it's graded</h3><p class="small muted" style="margin:0">Start at 100. High findings cost 25 points, medium 12, low 5. 95+ is A+, 85+ A, 70+ B, 55+ C, 40+ D, below that F.</p></div>
  <div class="panel"><h3 style="margin-top:0">Try it on</h3><p class="small muted" style="margin:0"><a href="/tools/security-check?url=puzaricloud.in">puzaricloud.in</a> · <a href="/tools/security-check?url=github.com">github.com</a> · <a href="/tools/security-check?url=example.com">example.com</a></p></div>
</div>
{% endif %}
{{ p.cta(tool, url) }}
{% endblock %}