Website Security Tools
If you are writing or maintaining websites then you should really use some of these
tools to check the security.
Development Tools
-
stupid-htaccess-tricks :
Some htaccees tricks. htaccess file can be used to access control, redirections, compression etc.
-
Crazy Advanced Master Class :
Includes undocumented techniques and methods will allow you to utilize mod_rewrite at an "expert level" by showing you how to unlock its secrets.
-
Batch RewriteRule Generator : Paste a list of old and new URLs and it
writes the 301 rules. We used it to generate our first rules when we were new to
mod_rewrite and the syntax was still a mystery.
-
htaccess Redirect Generator : A good tool ever to generate redirect rules.
-
htaccess rewrite rules tester : Paste your rules and a URL and see
exactly what Apache would do with it. We test every rule here before deploying
it. A bad rewrite rule takes the whole site down, and this avoids that.
-
CSP Validator : A must. Paste your Content Security Policy and it tells
you what is wrong and what each directive allows. We have used it to get the CSP
right on every one of our websites.
-
mozilla Observatory : Check your site's CSP with mozilla.
-
Google CSP Evaluator : Check your site's CSP with Google.
-
Security Headers : Check your site's Security Headers.
-
Cache-Control Configuration : Good explanation of Cache Control directives.
-
Check Http Headers : A comprehensive view of your sites http headers.
-
Our SSL Certificate Checker : Enter a domain and see who issued its
certificate, when it was issued and when it expires, every name it covers, the
full chain up to the root, and whether browsers will trust it. We wrote it
because the other checkers each show part of this and we wanted the complete
picture in one place.
-
Check Security Certificate : Check your security certificate.
-
Check Your Site : Checks headers and cookies with more verbose report.
htaccess, CSP, Security Headers and SSL Checks
Back to Developer Links
Sandbox and Fiddles
Website Design
