All projects
security
A scanner that grades a site's headers
Check a site's security headers and explain what each one prevents.
Why it matters
Content Security Policy and friends come up constantly in web security conversations. Building the checker forces you to learn what each header actually stops.
What you build
- Header collection for any URL
- A grade with a stated rubric
- An explanation of each header's purpose
- Batch mode over a list of sites
If you want more
- Add cookie attribute checks
- Add TLS configuration checks
Build it
- Run over a list of sites
Shows practical web security knowledge in a tool someone could actually use.
Get a plan built around projects like this