I built a security scanner, never shipped it, and finally finished the job

SecURL
I built SecURL about six months ago during a stretch of evenings where I kept hitting the same frustration: running a security scan on a site and getting back either a wall of jargon or a narrow result that only checked one thing. securityheaders.com checks headers. SSL Labs checks TLS. Mozilla Observatory covers a bit more. But nothing gave you the full picture in one pass, ranked by what to actually fix first. So I built it. SecURL scans a URL and checks HTTP security headers, TLS configuratio