A combination of website checks from Mozilla, headers, TLS, and an option to trigger firing some third party tests.
The header scan can be performed locally as well using the Mozilla Observatory CLI tool; although it seems as if this project isn’t really maintained very well (last commit december 2022, most directories untouched for over 5 years)