unrolled/secure

Health v2 · maintenance only

Adoption not part of the score

2354 stars · 145 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Secure is an HTTP middleware library for Go that adds quick security wins to web applications. It works as a standard net/http Handler and integrates with many Go frameworks, providing allowed-host filtering, SSL redirects, and security headers like HSTS, CSP, and X-Frame-Options.

Use cases

• add security headers to a Go web server
• redirect HTTP requests to HTTPS in Go
• restrict which hostnames can reach my Go app
• set Content-Security-Policy and HSTS headers in Go
• protect a Go API against clickjacking and MIME sniffing
• enforce SSL behind a reverse proxy in Go

When to choose

• you're building a Go web service with net/http or a compatible framework and want standard security headers
• you need host allowlisting and SSL redirect logic in middleware
• you want a small, focused, MIT-licensed library with no heavy dependencies

When to avoid

• you need a full web application firewall or advanced threat protection
• your stack isn't Go
• you want automatic vulnerability scanning or dependency auditing rather than header hardening

Facets

library · maturity stable

middleware security http-server security web-development backend go http-middleware security-headers ssl-redirect csp hsts net-http web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="unrolled/secure")