// case study
Headguard
Headguard
Analisador de HTTP security headers com CLI e interface web. Avalia HSTS, CSP, cookies e mais 7 categorias, atribui uma nota de A+ a F e gera recomendações de hardening.
HTTP security headers analyzer with a CLI and a web interface. Grades HSTS, CSP, cookies and 7 more categories from A+ to F and generates hardening recommendations.
Analisador de HTTP security headers com CLI e interface web. Avalia HSTS, CSP, cookies e mais 7 categorias, atribui uma nota de A+ a F e gera recomendações de hardening.
▸ Python tool that analyzes a site's HTTP protections — HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP/CORP and cookie attributes — and explains the attack each header mitigates (XSS, clickjacking, SSL stripping, CSRF, session hijacking) ▸ CLI with parallel batch scanning, JSON output and exit codes for use as a CI gate (--min-grade) ▸ FastAPI web interface with SSRF protection: refuses to scan private addresses, loopback and cloud metadata endpoints ▸ XSS-safe frontend rendering — headers from the scanned site are treated as hostile input ▸ The app serves the very headers it recommends, and can be scanned with itself ▸ 48 tests with no network dependency; CI across 12 combinations (Linux/Windows/macOS × Python 3.10–3.13)
imagens
