secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more). Maintained by TypeError on GitHub, where it has earned 1,049 stars from the community.

It's actively developed around fastapi, flask, django, and is a solid reference for anyone building with these tools.