master/tools/sysadmin-devops/https-web-services/security-hardening.md

11 lines
1.9 KiB
Markdown

# 🔐 Web Security, Hardening & Scanning Tools
Utilities for hardening server configs, scanning security headers/SSL/TLS setups, and basic web reconnaissance (directory/DNS busting).
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------|----------------|------------------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|------------------|-----------------|------------------------|
| h2t | — | [gildasio/h2t](https://github.com/gildasio/h2t) | Simple tool to scan websites and suggest security headers (with HTTP/2 focus). | http, hardening, security, headers, cli, python | low activity | ~2019 | 410 as of 2026-03 |
| ssllabs-scan | — | [ssllabs/ssllabs-scan](https://github.com/ssllabs/ssllabs-scan) | CLI client for Qualys SSL Labs API to assess and grade SSL/TLS configurations. | ssl, tls, scan, security, api, cli, go | 2024-03-27 | 2014 | 1.8k as of 2026-03 |
| http-observatory | — | [mozilla/http-observatory](https://github.com/mozilla/http-observatory) | CLI tool to scan websites for security headers and best practices (Mozilla Observatory). | security, headers, observatory, scan, cli, python | 2024-10-22 | 2016 | 1.9k as of 2026-03 |
| gobuster | — | [OJ/gobuster](https://github.com/OJ/gobuster) | Fast directory/file, DNS, and virtual host brute-forcing/busting tool. | busting, directory, dns, recon, cli, go | 2026-01-13 | ~2017 | 13.5k as of 2026-03 |