http-security

An HTTP/HTTPS intercept proxy written in Go.

Parse HTTP Security Headers

A dotnet tool to do a http request/response security assessment

Learn Spring Security step by step

OSINT tools for website research

A scan of all .gov.uk sites for the most common security headers or lack of

A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.

Adds missing HTTP response headers to SvelteKit apps

Real-time Layer 7 DDoS detection and HTTP traffic analysis tool designed to identify bot activity, anomalous requests, and application-layer attacks with high accuracy.

CLTEcho is an advanced HTTP Request Smuggling detection suite featuring AI-powered analysis, concurrent scanning, and comprehensive reporting. With 6 threat detection types, ML-based anomaly detection, HTTP/2 support, and WAF bypass techniques, it delivers enterprise-grade security testing with professional HTML/JSON reports for security researcher

Analyze HTTP security headers for your web application. A-F grading, per-header findings, and remediation — as a library or CLI.

Configurable, production-ready security headers middleware for Laravel, with CSP, HSTS, Permissions-Policy, safe defaults, validation, and comprehensive tests.

Evidence-gated active scanner for CORS, CSRF, header injection, cache poisoning, and content spoofing

Advanced Network Reconnaissance & Vulnerability Assessment CLI Tool

🔒 Zero-dependency HTTP security-header auditor — one GET per target, weighted A+…F grading, exact fix advice, JSON output and CI-ready exit codes. One-file blue-team grade gate.

Overkill Bash tool to scan and rate HTTP security headers (CSP, HSTS, COOP, CORP, Permissions-Policy + more). Passive, fast, nuclear edition by MR.Thugh ☠

A Python-based web vulnerability scanner that analyzes HTTP security headers, detects security configuration weaknesses, performs risk assessment, and generates automated security reports for cybersecurity learning and Blue Team practice.

A lightweight Python tool for analyzing HTTP security headers and identifying common web security hardening gaps.

Tower middleware that blocks vulnerability-scanner paths before they reach your application

OWASP security HTTP header checker - scan response headers, validate values, analyze cookies & CORS, replay raw Burp requests, A+ to F scoring, GUI + CLI with SARIF/CI exports