Analyze HTTP security headers including HSTS, CSP, X-Frame-Options, Referrer-Policy, and CORS policies