⚙️ NGINX config generator on steroids 💉

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

Internet standards compliance test suite

Cloudflare Free Plan security rules (Zero Trust approach) for small websites

Auth0, ASP.NET Core OAuth, OIDC

Web security and compliance scanner. SSL/TLS, headers and cookie analysis mapped to GDPR, PCI-DSS, ISO 27001 and HIPAA. CVSS v3.1 scoring, PDF reports, SARIF export. GTK4 desktop GUI. Part of the ShieldEye toolkit.

Kirby Plugin for easier Content Security Policy Headers

PoliteWebScanner is a learning-grade web vulnerability scanner plus AI-assisted report viewer. It crawls safely (queue-based, robots-aware, rate-limited), detects common issues (security headers, cookie flags, reflected XSS heuristics, SQL error patterns), and exports human-friendly JSON/HTML reports with optional AI help for triage and remediation

Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.

A small package for ASP.Net (Core) to automatically configure secure HTTP-Headers

A scan of all .gov.uk sites for the most common security headers or lack of

Security Headers Documentation

A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.

Network security scanner. Nmap-powered port scanning, CMS detection with live CVE lookup (CIRCL), security headers scoring and SSL/TLS analysis. GTK4 desktop GUI. Part of the ShieldEye toolkit.

Sensible HTTP security headers for Gleam web servers, inspired by helmet.

A Security HTTP-Header Checker. # Demoisturize it!

Super simple Burp Suite extension adding passive scanner checks for missing security headers in server responses

Abdal Security Headers is a powerful WordPress plugin that enhances your website's security through HTTP security headers. It provides an easy-to-use interface for managing security policies and protecting against common web vulnerabilities.

Your website has problems you can't see. Scry finds them. Crawl your entire website across SEO, security, performance, and accessibility. No browser, no subscription.

OWASP Security Header Checker Tool