⚙️ NGINX config generator on steroids 💉

letsencrypt nginx wordpress ssl security hsts digitalocean drupal gzip cdn https http2 rate-limiting php-fpm ssl-certificate hacktoberfest nginx-configuration nginx-configs security-headers digitalocean-community-tools

• Updated Dec 14, 2024
• JavaScript

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

python flask security django shiny wsgi content-security-policy web-security asgi http-headers security-headers fastapi strict-transport-security

• Updated Sep 1, 2026
• Python

Internet standards compliance test suite

tls hsts ipv6 https ipv4 spf dkim testing-tools compliance dnssec dane dmarc rpki starttls security-txt security-headers

• Updated Nov 11, 2026
• Python

Cloudflare Free Plan security rules (Zero Trust approach) for small websites

art bitcoin waf cloudflare ddos-protection antibots security-headers cloudflare-firewall-rules cloudflare-waf-rules cloudflare-expression cloudflare-waf-expressions cloudflare-waf-expression

• Updated Jun 23, 2026

Self-hosted collector for browser security reports: CSP, NEL, COOP, COEP and other Reporting API reports.

golang csp prometheus self-hosted content-security-policy coop report-uri nel csp-collector security-headers reporting-api report-to network-error-logging coep cross-origin-embedder-policy cross-origin-opener-policy

• Updated Nov 12, 2026
• Go

The battle-tested, all-in-one .htaccess configuration for WordPress. Combines H5BP performance standards, Perishable Press 8G Firewall WAF, and empirical zero-PHP threat intelligence.

wordpress caching security performance web-performance apache waf brotli reverse-proxy cybersecurity htaccess wordpress-security h5bp wordpress-website wp-htaccess security-headers 8g-firewall

• Updated Nov 10, 2026
• Python

PoliteWebScanner is a learning-grade web vulnerability scanner plus AI-assisted report viewer. It crawls safely (queue-based, robots-aware, rate-limited), detects common issues (security headers, cookie flags, reflected XSS heuristics, SQL error patterns), and exports human-friendly JSON/HTML reports with optional AI help for triage and remediation

python cli flask json crawler reporting rate-limiting xss pytest robots-txt sql-injection web-security html-report connection-pooling threadpool vulnerability-scanner security-headers ai-assistant cookie-security polite-crawler

• Updated Feb 13, 2026
• Python

Auth0, ASP.NET Core OAuth, OIDC

csp oauth oauth2 dotnet aspnetcore auth0 oidc blazor security-headers

• Updated Jun 7, 2026
• C#

Web security and compliance scanner. SSL/TLS, headers and cookie analysis mapped to GDPR, PCI-DSS, ISO 27001 and HIPAA. CVSS v3.1 scoring, PDF reports, SARIF export. GTK4 desktop GUI. Part of the ShieldEye toolkit.

python tls pci-dss web-security compliance hipaa appsec security-scanner gdpr iso27001 cvss sarif vulnerability-scanner security-headers gtk4

• Updated Nov 8, 2026
• Python

Kirby Plugin for easier Content Security Policy Headers

nginx yaml csp json kirby apache kirby-cms kirby-plugin hash content-security-policy nonce security-headers kirby4 kirby5

• Updated May 13, 2026
• PHP

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

python security hsts middleware owasp cybersecurity content-security-policy asgi security-headers fastapi

• Updated Oct 21, 2026
• Python

Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.

security laravel owasp-top-10 composer-package php8 security-headers

• Updated Mar 10, 2023
• PHP

A small package for ASP.Net (Core) to automatically configure secure HTTP-Headers

security csp hsts csharp dotnet https dotnet-core asp-net-core asp-net http-headers security-headers brickmakers

• Updated Aug 17, 2026
• C#

A scan of all .gov.uk sites for the most common security headers or lack of

python government cybersecurity web-security scanning uk http-security security-headers

• Updated May 16, 2026
• Python

Security Headers Documentation

htaccess security-headers

• Updated Jun 12, 2022

A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.

python owasp web-security pentesting appsec security-automation http-security blue-team security-headers secure-configuration

• Updated Nov 14, 2025
• Python

Network security scanner. Nmap-powered port scanning, CMS detection with live CVE lookup (CIRCL), security headers scoring and SSL/TLS analysis. GTK4 desktop GUI. Part of the ShieldEye toolkit.

python nmap port-scanner cve security-scanner pygobject network-scanner network-security vulnerability-scanner security-headers ssl-tls cms-detection gtk4 dns-enumeration

• Updated Nov 8, 2026
• Python

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

python schema-org web-scraping opengraph rapidapi metadata-extractor ai-agents lead-generation web-intelligence security-headers fastapi seo-audit contact-extractor tech-stack-detection ssrf-protection

• Updated Sep 2, 2026
• Python

Sensible HTTP security headers for Gleam web servers, inspired by helmet.

csp wisp mist gleam security-headers

• Updated Jun 21, 2026
• Gleam

Your website has problems you can't see. Scry finds them. Crawl your entire website across SEO, security, performance, and accessibility. No browser, no subscription.

link-checker cli golang devops crawler web-performance accessibility seo web-security command-line-tool structured-data pagespeed site-audit hreflang lighthouse sarif seo-tools security-headers technical-seo website-audit

• Updated Nov 10, 2026
• Go