A plug-and-play Python Flask security middleware package implementing OWASP Top 10 defenses. Protects lightweight microservices and web APIs from CSRF, Clickjacking, MIME-sniffing, and automated brute-force attacks.

Security Capabilities

• Content Security Policy (CSP): Dynamic nonces and strict policy headers preventing XSS script execution.
• Cookie Hardening: Enforces SameSite=Lax, HttpOnly, and Secure flags with automated session ID rotation.
• Redis Token Bucket: Sliding-window rate limiter protecting login and password reset routes.