Web-Security on Barry O'Callaghanhttps://barryocallaghan.com/tags/web-security/Recent content in Web-Security on Barry O'CallaghanHugo -- gohugo.ioenme@barryocallaghan.com (Barry O'Callaghan)me@barryocallaghan.com (Barry O'Callaghan)© 2026 Barry O'CallaghanTue, 20 Oct 2026 00:00:00 +0000sec-headers: Audit Your Security Headers in One Commandhttps://barryocallaghan.com/posts/sec-headers-launch/Tue, 20 Oct 2026 00:00:00 +0000me@barryocallaghan.com (Barry O'Callaghan)https://barryocallaghan.com/posts/sec-headers-launch/<p>Security headers are the cheapest defense you can deploy. They cost nothing, take minutes to configure, and block entire classes of attacks — XSS, clickjacking, MIME sniffing, SSL stripping. Yet most sites get them wrong, or don&rsquo;t set them at all.</p>