Log inSign up free
Loops › Security
PromptTop pickSecurityClaude Code, Codex, Cursor and other coding agents

Security headers and OWASP sweep

Sweeps a web app for missing security headers and common OWASP issues, fixing one at a time.

How each pass goes
  1. Scan headers and common OWASP risks.
  2. Fix the highest-risk finding.
  3. Re-scan to prove it is fixed.
Stops when
No high-risk findings remain.
Starter prompt
Check this web app for missing security headers (CSP, HSTS, X-Frame-Options, Referrer-Policy) and the OWASP Top 10. Fix the highest-risk finding, re-check to prove it is fixed, and repeat. Do not change production config without my approval. List anything left.
Paste into Claude Code, Codex or Cursor. To keep it running unattended, wrap it in /goal or the Ralph loop.
View on GitHub ↗