About OWASP Secure Headers Project
ℹ️ Purpose
The OWASP Secure Headers Project (also named OSHP) describes HTTP response headers that your application can use to increase the security of your application. Once set, these HTTP response headers can restrict modern browsers from running into easily preventable vulnerabilities. The OSHP intends to raise awareness and use of these headers.
📖 Content
While this page serves as the project’s official OWASP identity card, the GitHub repository remains the sole source of truth. All master data and project content are managed and hosted exclusively on GitHub.
Project Resources
Project Information
Production Project
Classification
Tool
Language
English
License
Apache 2.0
Contributors
25
GitHub Stars
217
Related Projects
Industry Usage
FinanceHealthIndustry
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.