Based on our record, Security Headers should be more popular than Hardenize. It has been mentiond 59 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Regular Audits: Use tools like Mozilla Observatory or Security Headers to regularly check your headers. - Source: dev.to / 8 months ago
What's better about this vs. Mozilla Observatory. https://developer.mozilla.org/en-US/observatory (formerly https://observatory.mozilla.org/) Or Security Headers? https://securityheaders.com/ Or VENOM? https://github.com/oshp/oshp-validator Applaud the effort, these are things that more devs should be aware of when building websites... Hey some specific feedback... - Source: Hacker News / 8 months ago
There are so many accessibility issues on Hacker News! Ways to avoid the same mistakes? Easy... 1 - Make sure everyone involved from designers to developers to content creators to testers to... Whatever your village has in it... Has knowledge of WCAG. (New standards out a few weeks ago!) WCAG is the de facto law of the land now, and businesses are liable from damages if they don't make efforts to ensure all users... - Source: Hacker News / over 1 year ago
Few minor accessibility issues. https://wave.webaim.org/report#/https://propbox.co/ Bunch of front-end security issues. Some of these are trivial, but also... Why not just knock them out? https://securityheaders.com/?q=https%3A%2F%2Fpropbox.co%2F&followRedirects=on The Privacy page is a nightmare, as others have pointed out. Why do this? Won't work with screen readers, won't let users copy text... it's bad.... - Source: Hacker News / almost 2 years ago
FWIW HN sets the Referrer-Policy header [1] to origin [2] but I have no idea how many browsers honor that. [1] - https://scotthelme.co.uk/a-new-security-header-referrer-policy/ [2] - https://securityheaders.com/?q=https%3A%2F%2Fnews.ycombinator.com%2F&hide=on&followRedirects=on. - Source: Hacker News / almost 2 years ago
Hey, I'm looking for an in-depth analysis of the security Skiff Mail. Pros and cons, arguments for and against, all the stuff. Couldn't find anything conclusive online (since it's relatively new) except what I could dig myself: WHOIS data, hardenize.com results, etc. Source: over 2 years ago
Https://hardenize.com is quite pretty, but there's nowhere near $999/mo of value in it for me! - Source: Hacker News / about 3 years ago
It does a little more and little less. More: Enter a list of (sub-) domains and get informed via email when "SSL things" change (for better or for worst), or your https certificate is about to expire. Less: No fancy pansy "report" Personally I prefer https://hardenize.com nowadays, over ssllabs for these kind of queries. - Source: Hacker News / about 3 years ago
If you have a custom email with ProtonMail you can check your setup on hardenize.com. That's what I use to make sure everything is set up correctly. Source: about 3 years ago
There are many notable open-source projects (SSLyze, CipherScan, testssl.sh, tls-scan, …) and several SaaS solutions (CryptCheck, CypherCraft, Hardenize, ImmuniWeb, Mozilla Observatory, SSL Labs, …) to do a security setting analysis, especially when we are talking about TLS, which is the most common and popular cryptographic protocol. However, most of these tools heavily depend on one or more versions of one or... - Source: dev.to / almost 5 years ago
Mozilla Observatory - The Mozilla Observatory is a project designed to help developers, system administrators, and security professionals configure their sites safely and securely.
Qualys SSL Server Test - This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet.
Scanigma - Scanigma offers a comprehensive solution that includes in-depth analysis, evaluation, and reporting of security settings, specific recommendations, sample configurations, and ongoing monitoring.
CryptoLyzer - Fast and flexible server cryptographic (TLS/SSL) settings analyzer library for Python 2.7/3.4+ with CLI
CryptCheck - CryptCheck is a Ruby toolbox that help anybody to check for cryptography security level and best practices compliance.
CipherScan - Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS.