Found this neat site that kind of overviews a web health check - web-check.xyz - it may be helpful to some. It gives you a pretty granular look at what “common practice” things you need and might be missing on your site if you are looking to make it “production ready” or just want to make sure you aren’t opening huge security holes.