SecURL passively grades headers, TLS, certificates, DNS trust, cookies, and visible third-party exposure. Run it on the web or from npm, then save important targets for quiet drift monitoring. No credentials or invasive probing.