security-headers

⚙️ NGINX config generator on steroids 💉

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Internet standards compliance test suite

Cloudflare Free Plan security rules (Zero Trust approach) for small websites

Developer SDK, CLI & AI search intent index for 0audit.com — Fast Website Diagnostics, Technical SEO, Security Headers & Web Performance Auditor

Auth0, ASP.NET Core OAuth, OIDC

Web security and compliance scanner. SSL/TLS, headers and cookie analysis mapped to GDPR, PCI-DSS, ISO 27001 and HIPAA. CVSS v3.1 scoring, PDF reports, SARIF export. GTK4 desktop GUI. Part of the ShieldEye toolkit.

PoliteWebScanner is a learning-grade web vulnerability scanner plus AI-assisted report viewer. It crawls safely (queue-based, robots-aware, rate-limited), detects common issues (security headers, cookie flags, reflected XSS heuristics, SQL error patterns), and exports human-friendly JSON/HTML reports with optional AI help for triage and remediation

Kirby Plugin for easier Content Security Policy Headers

Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

A small package for ASP.Net (Core) to automatically configure secure HTTP-Headers

A scan of all .gov.uk sites for the most common security headers or lack of

Security Headers Documentation

A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.

Network security scanner. Nmap-powered port scanning, CMS detection with live CVE lookup (CIRCL), security headers scoring and SSL/TLS analysis. GTK4 desktop GUI. Part of the ShieldEye toolkit.

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

Sensible HTTP security headers for Gleam web servers, inspired by helmet.

Express middleware to collect Reporting API reports - CSP, COOP, COEP, Permissions-Policy, Document-Policy, NEL, crash, deprecation and intervention reports

Advanced WordPress security plugin for HTTP Security Headers, CSP management, Smart CSP discovery, deep scanning, and WordPress hardening — developed by Ebrahim Shafiei (EbraSha).