Demo environment. Penrose Analytics is fictional, the demo people are shared, and the workspace resets nightly.

Gatehouse

Security report card

Paste the address of a public site. Gatehouse fetches it once, reads the response headers, and grades nine protections with a plain sentence about what to change. The same grader is behind POST /api/report-card.

Public http or https addresses only. Ten checks an hour from one address.