NWebsec classic - Security libraries for ASP.NET 4
NWebsec consists of several security libraries for ASP.NET applications. Three of these libraries work together to remove version headers, control cache headers, stop potentially dangerous redirects, and set important security headers. With the introduction of ASP.NET core, there are two sets of NWebsec packages. You’ve now found the documentation for the “old” packages built for ASP.NET 4:
If you’re not sure what “security headers” are, check out this blog post: Security through HTTP response headers.
NWebsec.SessionSecurity is a separate library that improves ASP.NET session security. Read more about the improvements in the blog post Ramping up ASP.NET session security.
To keep up with new releases or to give feedback, find @NWebsec on X.
Looking for the ASP.NET Core docs?
This documentation covers the classic ASP.NET 4 packages (NWebsec, NWebsec.Mvc, NWebsec.Owin). For the current ASP.NET Core packages, see the main NWebsec documentation.