A web misconfiguration scanner that checks a target URL for common security weaknesses
Web application for automated security posture assessment, risk scoring, and remediation recommendations.
A beginner-friendly, non-intrusive WordPress security review project demonstrating basic website security checks, evidence, risk assessment, and ethical testing boundaries.
Launchgrade — stack-agnostic starter template + technical baseline for modern web projects (Web Standards 2026). WCAG 2.2 AA / BFSG, Core Web Vitals, CSP, GDPR, AI-crawler defaults. Three Claude Code skills: setup, design, audit.
C++ HTTP security header analyzer for web application hardening
An Asynchronous HTTP Security Header, Session Cookie & CORS Auditor engineered with Python asyncio and aiohttp.
Scan HTTP security headers and find out what a Content Security Policy actually permits, not merely whether one exists
Security headers for static hosts — CSP, HSTS, cross-origin isolation. Writes a _headers file; Astro integration included.
A Python-based modular website vulnerability scanner with GUI and CLI support. Detects SQLi, XSS and more.
Passive web security header auditor for HTTPS, CSP, HSTS, and appsec posture review.
Scan security headers on any website — CSP, HSTS, X-Frame-Options, and more. Powered by Spider Cloud.
GitHub Action: check any website for EU compliance basics — privacy, terms, cookie consent, imprint, accessibility statement, DPA. Zero deps
A lightweight Python tool for analyzing HTTP security headers and identifying common web security hardening gaps.
Website security posture scanner: TLS, headers, CSP, cookies, CORS, exposed files and DNS, graded A+ to F — with a CLI and a React console.
Defensive CLI for auditing HTTP security response headers
A lightweight, standalone PHP 8.2+ security class providing robust protection against SQLi, XSS, CSRF, Password Attacks, Directory Traversal, XXE, and more. PSR-4 compliant and framework-agnostic.
Audit HTTP security-header docs for CSP, HSTS, clickjacking, nosniff, referrer policy, permissions policy, CORS, cookies, cache/download headers, reporting, rollout, and tests.
Python security automation tool that checks HTTP security headers, detects missing protections, generates findings, and exports CSV/TXT/JSON/NDJSON reports.
To associate your repository with the security-headers topic, visit your repo's landing page and select "manage topics."