Security guides your team can ship this week

Content Security Policy is the most powerful browser security mechanism available — and the most commonly misconfigured. This guide walks through every directive with real-world examples, shows you how to build a CSP that doesn't break your site, and explains how to use report-uri to catch violations before they become problems.

HTTP security headers are free, fast to deploy, and fix a wide range of browser-level vulnerabilities. This guide covers all seven essential headers, what each one does, how to add them to your server, and how to verify they are working.

A website security score gives you a single number that summarises how well your site is protected. This guide breaks down how the score is calculated, what the different ranges mean, and which fixes will move the needle fastest.