GitHub - MegaManSec/Gixy-Next: Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
5 min read
|
Saved February 14, 2026
|
Copied!
Do you care about this?
Gixy-Next is an open-source tool that scans NGINX configuration files for security misconfigurations and performance issues. It improves on the original Gixy by adding support for modern systems and enhancing detection capabilities. Users can run it locally or in a browser.
If you do, here's more
Gixy-Next is an open-source tool that scans NGINX configurations for security vulnerabilities and performance issues. By analyzing the nginx.conf file, it identifies misconfigurations and hardening gaps before they can affect production environments. Developed as an actively maintained fork of Yandex's original Gixy, Gixy-Next improves upon its predecessor by supporting modern Python and NGINX versions, while also introducing new checks. The source code is hosted on GitHub, and users can run scans locally via the command line or through an in-browser option that uses WebAssembly.
The tool detects a wide range of potential issues through various plugins, such as problems with HTTP splitting, server-side request forgery (SSRF), and improper use of the `add_header` directive. Users can customize their scans by specifying configuration file paths, selecting specific tests, and filtering results based on severity. Gixy-Next also provides output in different formats, including ANSI-colored text and machine-readable JSON.
Gixy-Next emerged in response to the shortcomings of the original Gixy, which became unmaintained and struggled with compatibility issues. Its previous maintainer's shift to AI-generated changes led to significant regressions and documentation clutter. The Gixy-Next team emphasizes contributions, encouraging users to report bugs, suggest new plugins, or help improve documentation and code. This collaborative approach aims to enhance the tool's effectiveness for ongoing NGINX configuration security reviews.
Questions about this article
No questions yet.