With Drupaloscopy, you can get informations about Drupal Sites depends of how it's protected :
- Is this site is Drupal Site ?
- Which Drupal version is used ?
- Does .txt files are protected and readable ?
- Does your Drupal site is vulnerable to SA-CORE-2014-005 (aka Drupageddon) ?
- Do CSS and JS are aggregated ?
- Is Drupal Cache is enabled ?
- Is GZIP Compression is enabled ?