Back to Playbooks
Techniques
tech-config-hardening
Web application and server configuration hardening review. Security header audit (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), TLS/SSL configuration check, debug endpoint enumeration (actuator, metrics, env, debug, swagger), verbose error message detection, backup and config
Slug
tech-config-hardening
Category
Techniques
Run Playbook
/gitest tech-config-hardening