secweb

library1.30.10pypypiunverified

Secweb is a pack of security middlewares for FastAPI and Starlette servers, providing features like Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and many more. It aims to offer easily configurable security headers with minimal overhead, implementing recommendations from MDN and OWASP. The library is currently at version 1.30.10 and is actively maintained.

auth-security web-framework

pip install secweb

github ↗package ↗docs ↗

INSTALL

IMPORT

SIG · SECWEB

secweb

auth-securitypythonv1.30.10

Install

1.6s avg

Import

—

Disk

16MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v1.30.10 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.920 runs

installs and imports cleanly · install 0.0s · import 0.000s · 18.3MB

glibc

py 3.10–3.920 runs

installs and imports cleanly · install 1.6s · import 0.000s · 19MB

16MB installed

● package 16MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

SecWeb

✓ from Secweb import SecWeb

✗ from Secweb import SecWeb

This quickstart demonstrates how to integrate `Secweb` with a FastAPI application. By initializing `SecWeb` with your FastAPI app, all default security headers are automatically applied, enhancing the application's security posture. To test, run the app and inspect the HTTP response headers.

import uvicorn from fastapi import FastAPI from Secweb import SecWeb app = FastAPI() # Initialize SecWeb to apply all default security headers. # Custom options can be passed via the 'Option' dictionary parameter. SecWeb(app=app) @app.get("/") async def read_root(): return {"message": "Hello, secured World!"} # To run this example: # 1. Save as a Python file (e.g., main.py) # 2. Run from your terminal: uvicorn main:app --reload # Check browser developer tools for applied security headers.

Debug

Known issues

breakingSecweb now requires Python 3.9 or higher. Older Python versions will not be supported with recent releases.

fix

Upgrade your Python environment to 3.9 or later. Consider using a virtual environment (e.g., `python3.9 -m venv .venv`).

affects: >=1.25.2

gotchaWhen initializing `SecWeb(app=app)`, all 16 security headers are enabled by default with their preset values. Users expecting a minimal set of headers or custom policies must explicitly define them using the `Option` parameter.

fix

To customize or disable specific headers, pass an `Option` dictionary to `SecWeb` with boolean flags or policy definitions (e.g., `SecWeb(app=app, Option={'Content-Security-Policy': {'default-src': "'self'"}})`).

affects: All versions

gotchaUsing individual middleware classes (e.g., `ContentSecurityPolicy`) instead of the combined `SecWeb` class will only activate those specific headers. Other security headers will remain deactivated unless explicitly added.

fix

Decide whether you need a comprehensive set of default headers (`SecWeb`) or fine-grained control over a few specific ones. If using individual middlewares, ensure all necessary security headers are separately configured.

affects: All versions

gotchaSome `Option` dictionary parameter keys for specific headers (e.g., `COEP`, `COOP`, `CORP`, `Referrer`) have changed across versions. While the library claims backward compatibility, existing configurations might need updates to reflect new key names or structures.

fix

Consult the latest Secweb documentation or GitHub README for the correct `Option` dictionary structure and key names for each security header in your installed version.

affects: >=1.25.2

Upgrade

Version history

1.30.10latest on PyPI · released Jan 15, 2026

Audit

Dependencies

pythonrequiredRequires Python 3.9 or higher for compatibility with recent updates and features.

Agent activity

36 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/tmotagam/Secweb#readme ↗

packagehttps://pypi.org/project/secweb/ ↗

docshttps://github.com/tmotagam/Secweb#readme ↗