Security Headers Python Packages

secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

fastapi-csp-docs

CSP-safe replacements for FastAPI's built-in /docs, /redoc, and OAuth2 redirect endpoints, with no inline script or style, so a strict Content-Security-Policy still works

web-audit-pro

Free website security checks with plain-language reports in English and Russian: TLS, SPF/DMARC, security headers, WordPress plugins · Бесплатная проверка безопасности сайта с понятным отчётом

fastapi-security-headers

🛡️ The missing security headers middleware for FastAPI. Protect your API against XSS, clickjacking, MIME sniffing, and OWASP Top 10 web vulnerabilities with zero-config defaults

surface-audit

Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.

crewai-webmetadata-extractor

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

headerhound

Defensive CLI for auditing HTTP security response headers

langchain-webmetadata-extractor

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

web-posture-check

Command-line security posture checker for websites: security headers, cookies, CORS, TLS certificate and protocols, CAA, security.txt, SPF/DMARC/DKIM and the HTTPS redirect, with a score, Markdown/JSON reports and a GitHub Action.

llamaindex-webmetadata-extractor

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

sech3r

A Security HTTP-Header Checker. # Demoisturize it!

webmetadata-extractor

Turn any URL into structured intelligence — SEO, tech stack, contacts, products, social profiles, security headers & AI-ready Markdown via one fast REST API.

sechead

Python CLI tool for auditing website security headers, CSP, HSTS, clickjacking protections, and HTTP hardening issues.

previewshield

Preview security headers before they ship - a safe scanner with a CLI, local web UI, GitHub Action, and developer-ready reports.

csrf-sentry

Helps developers implement tailored CSRF protection strategies without tokens, ensuring robust security and easy integration.

secably

Command-line security checks: TLS, HTTP security headers, DNS/email posture and subdomain discovery — local, no account needed.