This project includes the core application-layer hardening required for a safer deployment, including HTTPS enforcement, security headers, directory blocking, sensitive-file protections, and debug-mode suppression.
These items must be performed against the live deployment environment before a full production security sign-off can be claimed.