An HTTP/HTTPS intercept proxy written in Go.

Parse HTTP Security Headers

A dotnet tool to do a http request/response security assessment

Learn Spring Security step by step

A scan of all .gov.uk sites for the most common security headers or lack of

OSINT tools for website research

A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned remediation reports.

Adds missing HTTP response headers to SvelteKit apps

Real-time Layer 7 DDoS detection and HTTP traffic analysis tool designed to identify bot activity, anomalous requests, and application-layer attacks with high accuracy.

Analyze HTTP security headers for your web application. A-F grading, per-header findings, and remediation — as a library or CLI.

Overkill Bash tool to scan and rate HTTP security headers (CSP, HSTS, COOP, CORP, Permissions-Policy + more). Passive, fast, nuclear edition by MR.Thugh ☠

Issue tracker microservice project

CLTEcho is an advanced HTTP Request Smuggling detection suite featuring AI-powered analysis, concurrent scanning, and comprehensive reporting. With 6 threat detection types, ML-based anomaly detection, HTTP/2 support, and WAF bypass techniques, it delivers enterprise-grade security testing with professional HTML/JSON reports for security researcher

Cross-browser (Chrome/Firefox/Edge) MV3 extension for OWASP-inspired, browser-side security review of cookies, JWTs, storage secrets, and HTTP headers — passive assessment engine, cookie editor, and self-contained HTML reports.

Passive web application security analyzer for HAR files and raw HTTP captures — security headers, CSP, cookies, CORS, disclosure & transport checks with SARIF output. Zero network calls.

Paid agent tools over x402: secret scans, config/diff/pre-deploy/URL security audits, OG rendering, and MCP. Base USDC; no API key.

Scanner de segurança web que verificar os headers HTTP e identifica vulnerabilidades.

Stock price checker microservice project

Personal library microservice project

HTTP security-header audit in Bash. A+ through F grading, TLS info, Markdown output. Offline-capable, no securityheaders.com dependency.