django tools

Settings Security Checker

Heuristic text scans for common foot-guns. Pair with the Django deployment checklist and your platform’s security defaults.

Pattern-based hints for common misconfigurations. False positives are possible when values come from environment variables — use as a checklist, not a substitute for deployment review.

Flags
  • DEBUG is True — disable in production and use environment-based flags.
  • ALLOWED_HOSTS is empty or "*" — set explicit hostnames for production.