Maybe you can add HTTP2&#x2F;SPDY detection too. BTW your HSTS test does not verify if the format&#x2F;syntax is correct.<p>--<p>These are all good but I would include the following:<p>Qualys SSL Server Test - The first site I use.<p>testssl.sh - for behind the fireware testing<p><a href="https:&#x2F;&#x2F;tls.imirhil.fr&#x2F;" rel="nofollow">https:&#x2F;&#x2F;tls.imirhil.fr&#x2F;</a> - this one is nice because it shows the ciphers used&#x2F;avail broken down by TLS version. I have not seen any other site do this.