unrolled/secure

Go net/http configurable handler to handle CORS requests

Official CORS gin's middleware

Manages application of security headers with many safe defaults

Help secure Express apps with various HTTP headers

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

Authenticator via oauth2, direct, email and telegram

Go security checker

Golang Secure Coding Practices guide