master/tools/sysadmin-devops/https-web-services/security-hardening.md

1.9 KiB

🔐 Web Security, Hardening & Scanning Tools

Utilities for hardening server configs, scanning security headers/SSL/TLS setups, and basic web reconnaissance (directory/DNS busting).

Name Vendor/Webpage GitHub Repo Brief Description Tags Latest Commit Creation Date Stars
h2t — gildasio/h2t Simple tool to scan websites and suggest security headers (with HTTP/2 focus). http, hardening, security, headers, cli, python low activity ~2019 410 as of 2026-03
ssllabs-scan — ssllabs/ssllabs-scan CLI client for Qualys SSL Labs API to assess and grade SSL/TLS configurations. ssl, tls, scan, security, api, cli, go 2024-03-27 2014 1.8k as of 2026-03
http-observatory — mozilla/http-observatory CLI tool to scan websites for security headers and best practices (Mozilla Observatory). security, headers, observatory, scan, cli, python 2024-10-22 2016 1.9k as of 2026-03
gobuster — OJ/gobuster Fast directory/file, DNS, and virtual host brute-forcing/busting tool. busting, directory, dns, recon, cli, go 2026-01-13 ~2017 13.5k as of 2026-03