Free app for Devs to check the security header of your webapp / api: MarMo Shield