HTTP header security scanner. Finds Host header injection, web cache poisoning, request smuggling and unkeyed-input gadgets, assesses HSTS/CSP/cookie posture, confirms every finding with a second probe, maps it to OWASP ASVS 5.0 and PCI DSS 4.0.1 — and reports what it could not assess instead of counting it as a pass.
cors csp hsts pci-dss compliance ssrf sarif devsecops open-redirect security-headers pentesting-tools crlf-injection security-scanners http-request-smuggling host-header-injection web-cache-poisoning owasp-asvs cache-deception http-headers-scanner appsecchina
-
Updated
Oct 12, 2026 - Python