Useful Security Information in API Response

[pthompso]

Hi Guys,

Background: I use WPT to build performance reports for client websites, a request has come in to show some baseline security info too.

I was wondering if there are any suggestions for gathering security information from WPT API responses, I know there are some datapoints regarding certs etc, but is there anything else that could be used as a basic security profile for the site bing tested.

I know WPT test is a performance tool, and I am looking into some security testing scripts as well for this job, just checking if anyone had some advice as I would like to leverage anything I could from WPT.

thanks.