⚙️ NGINX config generator on steroids 💉

Testing TLS/SSL encryption anywhere on any port

An upgradable boilerplate for Progressive web applications (PWA) with server side rendering, build with SEO in mind and achieving max page speed and optimized user experience.

Manages application of security headers with many safe defaults

🔒 Chromium's HSTS preload list submission website.

Adds extra security-related features in your Symfony application

Scan domains and return data based on HTTPS best practices

An automated Wireless RogueAP MITM attack framework.

Check any website (or set of websites) for insecure security headers.

This plugin provides native SSL instrumentation for monitoring, including: hostname and chain verification, cert expiry, and Qualys SSL Labs reporting

PHP Secure Headers

Internet standards compliance test suite

🔒🔍 A Go package to scan sites against requirements for Chromium-maintained HSTS preload list.

Forced Man-In-The-Middle HTTPs-Avoiding Reverse Proxy

Lib.Web.Mvc is a library which contains some helper classes for ASP.NET MVC such as strongly typed jqGrid helper, attribute and helper providing support for HTTP/2 Server Push with Cache Digest, attribute and helpers providing support for Content Security Policy Level 2, FileResult providing support for Range Requests, action result and helper p…

CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the sslyze API and ssl, http-client and dns libraries, cryptonice collects data on a given domain and performs a series of tests to check TLS configuration…

A PHP library aiming to make the use of browser security features more accessible.

NGINX Module for sending security headers

An open-source modular framework capable of identifying a wide range of TLS vulnerabilities and assessing compliance with multiple guidelines. Its actionable report can assist the user in correctly and easily fixing their configurations.

http://testssl.sh/ in a tiny docker container