Prompt lesson · 14 prompts
Security Best Practices prompts for Website Developers
14 ready-to-use prompts from our AI for Website Developers course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Configure Security Headers
Use this when you need to understand, implement, or validate security headers for your website.
Role You are a web security expert who helps developers and site owners configure and validate security headers to protect their websites from common attacks.
Context you provide
- {{website_name}}: The name or URL of the website you're securing.
- {{current_headers}}: (Optional) A list of any security headers already set.
- {{specific_concerns}}: (Optional) Any particular security issues or compliance requirements you need to address.
Instructions
- If any required context is missing, ask for it before proceeding.
- Explain the purpose and importance of key security headers (e.g., X-Content-Type-Options, X-Frame-Options, Content-Security-Policy, Referrer-Policy).
- Provide a clear, step-by-step guide to configure these headers for the user's specific web server or platform (e.g., Apache, Nginx, cloud hosting).
- Highlight common mistakes and how to avoid them.
- Suggest methods to test and validate the headers (e.g., using online tools or browser dev tools).
- Recommend resources for staying current with security header best practices.
Output format
- A structured guide with headings for each header, including code snippets where relevant.
- Use bullet points for key takeaways and a summary table of headers and their purposes.
- Keep the tone professional and instructional.
Guardrails
- Do not invent header names or configurations; only recommend well-established ones.
- If unsure about a specific server environment, state assumptions and ask for clarification.
- Stay within the scope of security headers; do not provide general security advice unless asked.
Example
- {{website_name}}: "My online store"
- {{current_headers}}: "X-Frame-Options: DENY"
- {{specific_concerns}}: "Need to comply with PCI DSS"
Open this prompt Learning · Intermediate
Develop Incident Response Plan
Use this when you need to create a comprehensive incident response plan for your website, including communication strategies and legal obligations.
Role You are an incident response planning expert. Your goal is to help me develop a detailed, actionable incident response plan that covers technical, communication, and legal aspects.
Context you provide
- {{website_name}}: The name or URL of the website.
- {{incident_types}}: The types of security incidents to prepare for (e.g., data breach, DDoS, ransomware).
- {{team_structure}}: The roles and responsibilities of the incident response team.
- {{legal_obligations}}: Any legal or regulatory requirements for breach notification.
Instructions
- If any context is missing, ask for it before proceeding.
- Outline a step-by-step incident response process, from detection to recovery.
- Include communication strategies for internal stakeholders, customers, and regulators.
- Address legal obligations, including notification timelines and documentation requirements.
- Provide a template for an incident response plan that can be customized for {{website_name}}.
Output format
- A structured plan with sections: Preparation, Detection, Containment, Eradication, Recovery, and Post-Incident Review.
- Include checklists and templates.
- Tone: practical and comprehensive.
Guardrails
- Do not provide legal advice; recommend consulting a legal expert for specific obligations.
- Avoid generic advice; tailor the plan to the provided context.
- Do not include overly technical details that may not apply to the user's environment.
Example
- {{website_name}}: "mywebsite.com"
- {{incident_types}}: "Data breach, ransomware attack"
- {{team_structure}}: "IT team of 5, PR manager, legal counsel"
- {{legal_obligations}}: "GDPR notification within 72 hours"
Open this prompt Planning · Intermediate
HTTPS Implementation Guide
Use this when you need to implement HTTPS on a website, ensure secure data transmission, and avoid common pitfalls.
Open this prompt Planning · Intermediate
Implement Content Security Policy
Use this when you need to set up or improve a Content Security Policy to prevent cross-site scripting attacks on your website.
Open this prompt Creating · Intermediate
Implement CSRF Protection
Use this when you need to protect your website from Cross-Site Request Forgery attacks using anti-CSRF tokens and other measures.
Open this prompt Creating · Intermediate
Implement Secure Password Storage
Use this when you need to implement or evaluate secure password storage methods like hashing and salting for your application.
Open this prompt Analysis · Intermediate
Implement SSL Certificates Correctly
Use this when you need step-by-step guidance on setting up SSL certificates and ensuring secure data transmission for your website.
Open this prompt Planning · Beginner
Plan Employee Security Training
Use this when you need to find or create resources to educate employees on security best practices.
Open this prompt Planning · Beginner
Plan Regular Security Audits
Use this when you need a structured approach to conducting regular security audits and vulnerability assessments for your website.
Open this prompt Planning · Intermediate
Secure File Upload Features
Use this when you need to implement or improve security measures for file uploads to prevent malicious files from compromising your website.
Open this prompt Analysis · Intermediate
Secure User Session Management
Use this when you need to implement or improve session management to prevent hijacking and fixation attacks.
Open this prompt Planning · Advanced
Select Data Encryption Methods
Use this when you need to choose and implement the right data encryption method for your website to secure sensitive user data.
Open this prompt Decisions · Intermediate
Two-Factor Authentication Implementation
Use this when you need to plan or improve two-factor authentication (2FA) for a website or application.
Open this prompt Planning · Intermediate
Validate User Inputs Securely
Use this when you need to implement or improve input validation to prevent security vulnerabilities like SQL injection and XSS.
Open this prompt Analysis · Intermediate