Platform 8 · Security & Audit Kits
Threat Model Templates
built by Lars Holm
All levels 60 files 478 aboard
Open fare
€1–€100
Security & Audit Kits
All levels
Line KJ-152 Platform 8 · Security & Audit Kits
Security Header and Policy Pack
150 tested security header and Content-Security-Policy configs for Nginx, Apache, Caddy, Cloudflare and frameworks.
532
builders
LH Maintained by Lars Holm
- Last updated October 2026
- English
- 21m of walkthroughs
- 150 files
What you get
5 items in the boxEvery bullet below is in the download, working, the moment your payment clears.
- 150 tested header and CSP configurations
- Nginx, Apache, Caddy, Cloudflare and middleware formats
- Report-only variants for safe rollout
- Third-party service allowances explained
- Pay any fare from €1 to €100 — each euro unlocks 1.5 policies
What's in the box
5 parts · 150 files · 21m of walkthroughs
30 files with a 3m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
30 files with a 4m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
30 files with a 5m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
30 files with a 6m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
30 files with a 3m walkthrough video. This part is documented in the architecture guide, with notes on every decision and how to change it for your own project.
The full file tree and the walkthroughs are in your download, available straight after checkout.
5 parts · 150 files
21m total length
You will need
Short list, and deliberately so. If you meet these you can start today.
- Control over your web server or CDN configuration
About this product
Security headers are easy to set and easy to get subtly wrong. This pack contains 150 tested configurations: Content-Security-Policy for common front-end stacks and third-party services, HSTS rollouts, permissions policies, cross-origin isolation, and cookie hardening for popular frameworks.
Configurations are provided for Nginx, Apache, Caddy, Cloudflare and framework middleware, each with a report-only variant for safe rollout. Your fare unlocks groups in the listed order.
You choose the fare: anything from €1 to €100, in whole euros. At €100 you get every part, plus all future additions to it.
Topics covered
Frequently asked questions
Still unsure about something? Write to our contact page and a human answers, usually the same working day.
Pick any whole-euro fare from €1 to €100. Each euro unlocks 1.5 policies, and parts unlock in the order listed on this page, so you see exactly what your fare includes before you pay.
No. New policies added to the parts you have unlocked appear behind the same download link at no extra cost.
Checkout is handled on our provider's secure payment page. The moment your payment clears we email your personal access link and access code to the address you used at checkout, and the same link appears in your account library. There is nothing to install and nothing to wait for.
Email within 14 days of your purchase, quote your order number, and we refund the full amount to your original payment method. No form to fill in and no questions about how much of the product you watched.
What builders say
No reviews yet
Nobody has reviewed this product yet, so there is no score to show. Buy it, work through it, and your review could be the one that helps the next developer decide.
Your maker
LH
Lars Holm
Go and Rust engineer with a security habit
- 2,427 builders aboard
- 11 products published
- 5.0 maker rating
- Go
- Rust
- PostgreSQL
- Application security
- Linux hardening
Lars started out in penetration testing and moved into backend engineering, so he writes Go services the way an attacker would read them. He maintains the Go API and Postgres tenancy modules and the whole Security line. His audit kits explain the reason behind every check, because a checklist nobody understands gets skipped.