Needing to add security to my website
I am needing to know how to add security to my website. Can someone help?
9 Replies
what have you done so far?
what are you trying to protect against?
I would absolutely recommend checking the server's security headers and using this website to test it:
https://securityheaders.com/
Analyse your HTTP response headers
Quickly and easily assess the security of your HTTP response headers
The security headers provide just that: security.
It will also help build development skills as you'll know what kind of content requires more security and what doesn't.
I love the website. There are recommendations for new/old headers that are in use. Very practical real-world experience.
that just tests the configuration of the server, but doesn't go any deeper than that
for example, an sql injection or a path traversal bug won't be caught by that
You can start with the OWASP Top 10 then move on to their full cheat sheet series.
But until you give us specifics we can only give general tips.
that's a good start point, but we also don't know what's the attack surface
Exactly
and we don't have the code
Exactly so