Header Guardian

Header Guardian is a Burp Suite extension designed to enhance the security of web applications by identifying missing, misconfigured, and unnecessary HTTP security headers. Properly configured security headers are critical in protecting against vulnerabilities like cross-site scripting (XSS), clickjacking, and information leakage.

Features

• Missing Headers Detection: Identifies critical security headers that are missing from HTTP responses.
• Misconfigured Headers Detection: Reports headers that are present but not properly configured according to OWASP best practices.
• Correct Headers Reporting: Lists headers that are properly configured.
• Unnecessary Headers Detection: Detects headers that should be removed, such as Server and X-Powered-By.

How to use

1. Once the extension is installed, it will automatically scan HTTP responses during passive scans.
2. Results can be found in the Issues tab.