Search code examples
securityxsscsrfowaspx-frame-options

Scan security-headers on local projects


I like this site a lot

https://securityheaders.com/?q=localhost&followRedirects=on

I want to use it to scan my local project

I can't seem to do that

Is there a way to check security headers on local project that not live yet ?


Solution

  • You can do that with ZAP. The baseline scan (https://github.com/zaproxy/zaproxy/wiki/ZAP-Baseline-Scan) will do that and more - we use that at Mozilla.