Read the new blog
securityheaders.io - check content security policy (CSP) etc gives a grade A (good) to F (bad)
sslabs - SSL security checks, checks cipher stuires, ptorocols, gives a grade A (good) to F (bad)
wormly - check SSL of a server