Assess the security of your HTTP response headers. Powered by @probely, created by @Scott_Helme.
Earth
Joined May 2015
- Tweets276
- Following3
- Followers5.1K
- Likes361
Security Headers retweeted
This is something I've wanted to dig into for years but I've just never had the time to do it!
A deep analysis into the @securityheaders scan data, now possible thanks to our partnership with @probely 😎
probely.com/blog/unveiling-t…
Security Headers retweeted
Can anyone tell me the story behind the HSTS max-age value on Amazon? 🤔
There’s got to be a reason behind that! @amazon @AWSSecurityInfo @securityheaders
securityheaders.com/?q=amazo… – at San Francisco, CA
Security Headers retweeted
Come and find us at @NDC_Conferences Oslo for our first ever vendor exhibit!
Meet our founder, see a product demo, enter our hacking competition or watch our artist create your swag live on the stand! It's going to be epic, we'll see you there 😎 report-uri.com/event/ndc_osl…
Security Headers retweeted
Safari 16.4 is bringing support for the Reporting API! This means reports can be sent out-of-band asynchronously, and, we’re getting some new reports too.
✅ Reporting API
✅ COEP violation reporting
✅ COOP/COEP nav violation reporting
webkit.org/blog/13966/webkit…
Security Headers retweeted
A few people reached out to say they couldn't get their corporate card or approval in time so I've extended this code for another 7 days!
Apparently when you work for a company there's like "processes" and stuff! Who knew?! 😅
Use 15FORLIFE at checkout to get 15% off for life!!
Security Headers retweeted
It's finally here!!! The @securityheaders API 😎
Launched right here, right now, at @NDC_Conferences #ndclondon 💪
scotthelme.co.uk/announcing-…
Security Headers retweeted
This is really interesting research and I wanted to know if I could expand upon it using Content Security Policy and reporting via @reporturi. I've just created inappbrowsercsp.com/ to do exactly that!
🔥 New Post: Announcing InAppBrowser - see what JavaScript commands get injected through an in-app browser
👀 TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps.
krausefx.com/blog/announcing…
Security Headers retweeted
I'm considering changing the grading criteria on @securityheaders to allow an A+ grade with a CSP that contains unsafe-inline in the style-src directive. What are your thoughts?
37%Yes, allow A+
25%No, keep as it is
38%Show results
436 votes • Final results
Security Headers retweeted
@Scott_Helme
Look at me! :)
A+ on both securityheaders.com/?q=jul13… and ssllabs.com/ssltest/analyze.…
Thanks for the great course! Truely the best TLS training in the world!
Security Headers retweeted
If you or your company may be a good fit for sponsoring my blog or @securityheaders then please give this a read: scotthelme.co.uk/im-looking-…
Security Headers retweeted
At @reporturi we're now contributing back to the community! Thanks to @spazef0rze we're supporting @nettefw, @debsuryorg, @phpstan and @letsencrypt!
🎉❤🏆💪
scotthelme.co.uk/supporting-…
Security Headers retweeted
HPKP is no more! I'd imagine there will be mixed thoughts on this one, what are your views? scotthelme.co.uk/hpkp-is-no-…
Security Headers retweeted
I've just deployed some changes to @securityheaders that may impact your grade! They should also make it easier to achieve an A+ if you're doing things right 😎
scotthelme.co.uk/security-he…
Security Headers retweeted
Aware of major @Cloudflare issues impacting us network wide. Team is working on getting to the bottom of what’s going on. Will continue to update.
Security Headers retweeted
Hey Twitterverse, can you help me out? I'm looking to make a logo for @securityheaders so I can have some stickers made to give away. Are you any good at design and putting something together like that?
Security Headers retweeted
We're expanding @reporturi! We've now processed 130 *BILLION* reports and need help on the marketing side while we continue building out new features. If this is your thing or you can recommend someone, please get in touch. – at Oslo, Norway
Security Headers retweeted
This is a really good opportunity for a sponsor to get out front and center in front of a heap of tech people interested in security on @Scott_Helme’s project. Definitely worth a look! – at Whistler, British Columbia
It's been awesome to have @Sophos as a sponsor through 2018 but we're looking for a new sponsor for 2019. Can you or your company help and support the project? Get in touch!
Security Headers retweeted
Just found out about securityheaders.com @securityheaders.
Great to start thinking a bit More about #websecurity. 🔒