Inspect HTTPS and headers
Review HSTS, CSP, frame protection, and other browser security controls.
Security and secrets
Catch exposed security problems before handoff.
Headers, certificates, known vulnerabilities, client-bundle secrets, and public threat intelligence are checked in one run.
From public URL to clear next action.
01
02
Search public assets
Client bundles and responses are checked for exposed keys, tokens, and credentials.
03
Run vulnerability probes
Known vulnerability and misconfiguration templates test the public attack surface.
04
Rank by exposure
Evidence and severity separate urgent leaks from lower-risk hardening work.
Built around evidence, not generic advice.
Header evidence
See the exact response state behind every missing or weak control.
Secret redaction
Sensitive findings are gated and presented without publishing full credential values.
TLS context
Certificate and connection findings sit beside DNS and server evidence.
Repeatable scans
Scan history makes it clear when a security regression appeared.