Hacker News Reader

I got a lot of good tips from https://observatory.mozilla.org/

It gives a clear rating, and readable, concrete advice to get you to the next level.

I also block the SSH port on the firewall level, unless I need to do some maintenance (and then I only unblock my IP address). So the SSL port is the only open port most of the time.

View on HN

Good one, I didn't know that one yet. For the dynamic scans, I can also suggest https://www.securityheaders.com and https://ssllabs.com/

you'll find both of these in the 'third party' tab of observatory. But indeed, I also got a lot of good from these, especially ssllabs

Reply on news.ycombinator.com