⚙️ NGINX config generator on steroids 💉
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
Internet standards compliance test suite
Cloudflare Free Plan security rules (Zero Trust approach) for small websites
Auth0, ASP.NET Core OAuth, OIDC
Web security and compliance scanner. SSL/TLS, headers and cookie analysis mapped to GDPR, PCI-DSS, ISO 27001 and HIPAA. CVSS v3.1 scoring, PDF reports, SARIF export. GTK4 desktop GUI. Part of the ShieldEye toolkit.
Kirby Plugin for easier Content Security Policy Headers
PoliteWebScanner is a learning-grade web vulnerability scanner plus AI-assisted report viewer. It crawls safely (queue-based, robots-aware, rate-limited), detects common issues (security headers, cookie flags, reflected XSS heuristics, SQL error patterns), and exports human-friendly JSON/HTML reports with optional AI help for triage and remediation
Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.
A small package for ASP.Net (Core) to automatically configure secure HTTP-Headers
A scan of all .gov.uk sites for the most common security headers or lack of
A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.
Network security scanner. Nmap-powered port scanning, CMS detection with live CVE lookup (CIRCL), security headers scoring and SSL/TLS analysis. GTK4 desktop GUI. Part of the ShieldEye toolkit.
Sensible HTTP security headers for Gleam web servers, inspired by helmet.
A Security HTTP-Header Checker. # Demoisturize it!
Super simple Burp Suite extension adding passive scanner checks for missing security headers in server responses
Abdal Security Headers is a powerful WordPress plugin that enhances your website's security through HTTP security headers. It provides an easy-to-use interface for managing security policies and protecting against common web vulnerabilities.
Your website has problems you can't see. Scry finds them. Crawl your entire website across SEO, security, performance, and accessibility. No browser, no subscription.
OWASP Security Header Checker Tool
Add a description, image, and links to the security-headers topic page so that developers can more easily learn about it.
To associate your repository with the security-headers topic, visit your repo's landing page and select "manage topics."