웹 보안 헤더 자동 점검하기

보안 헤더 CLI 점검 방법:

# curl로 헤더 확인
curl -I https://example.com

# 특정 헤더만
curl -sI https://example.com | grep -i -E "strict|content-security|x-frame|x-content"

# 스크립트로 점검
#!/bin/bash
URL=$1
HEADERS=$(curl -sI $URL)

check() {
  echo -n "$1: "
  echo "$HEADERS" | grep -qi "$1" && echo "✅" || echo "❌ Missing"
}

check "Strict-Transport-Security"
check "Content-Security-Policy"
check "X-Frame-Options"
check "X-Content-Type-Options"
check "Referrer-Policy"
check "Permissions-Policy"

자동화 도구:

• Mozilla Observatory — CLI: observatory example.com
• testssl.sh — SSL/TLS + 헤더 종합 점검