# Ssl And Security Hardener

> Use when planning SSL/TLS, HTTPS redirects, HSTS, security headers, CSP, cookie flags, backups, monitoring, and basic launch hardening. Dry-run first; do not mutate production server, DNS, certificates, or secrets without explicit approval.

- Skill: `sergekostenchuk/ssl-and-security-hardener` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add sergekostenchuk/ssl-and-security-hardener`
- Raw SKILL.md: https://api.skillmd.com/api/skills/sergekostenchuk/ssl-and-security-hardener/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: sergekostenchuk (https://skillmd.com/u/sergekostenchuk)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/sergekostenchuk/ssl-and-security-hardener

---


# SSL And Security Hardener

Plan launch security hardening and verification without mutating production.

## Workflow

1. Identify target stack, hosting, domain, and approval status.
2. Plan SSL/TLS, redirects, HSTS, headers, CSP, cookies, backups, monitoring, and vulnerability basics.
3. Define verification commands and rollback.
4. Coordinate final gate with `launch-readiness-auditor`.

## Safety Rules

- Do not issue certificates, change server config, force HTTPS, edit CSP, or rotate secrets in production without approval.
- Do not store private keys, cert private material, tokens, or `.env`.

## Validation

```bash
python3 $CODEX_HOME/skills/.system/skill-creator/scripts/quick_validate.py $CODEX_HOME/skills/ssl-and-security-hardener
python3 $CODEX_HOME/skills/senior-skill-architect/scripts/lint_production_skill.py $CODEX_HOME/skills/ssl-and-security-hardener
python3 -m json.tool $CODEX_HOME/skills/ssl-and-security-hardener/evals/evals.json >/dev/null
```