How to make my custom webserver more secure?

I wrote a small intranet webserver and i want it to be as secure as possible.
I know it won't be 100% secure but i want to know and fix the most obvious security flaws. An automated tool would also be nice. Any recommendations?