I like this site a lot
https://securityheaders.com/?q=localhost&followRedirects=on
I want to use it to scan my local project
I can't seem to do that
Is there a way to check security headers on local project that not live yet ?
You can do that with ZAP. The baseline scan (https://github.com/zaproxy/zaproxy/wiki/ZAP-Baseline-Scan) will do that and more - we use that at Mozilla.