Web security reporting
Paste a URL. Get a full security report — findings ranked by severity, enriched with context, built for real triage.
Report opens immediately with a live workflow monitor while the scan runs.
Security report
example.com
Executive summary
The target exposes several misconfigured security headers and has publicly accessible deployment artefacts. Critical: missing Content-Security-Policy and exposed .env file.
Immediate action
Exposed .env file
/.env is publicly accessible and contains database credentials.
Missing Content-Security-Policy
No CSP header returned. XSS and injection attacks are unrestricted.
High risk
Security score
What it does
A multi-stage pipeline — baseline checks, stack detection, specialist modules — producing a structured, enriched report you can act on.
Severity-ranked findings
Critical through informational, each with evidence and remediation guidance.
Executive summary
Written from the actual findings — not a template. Readable by an engineer or a stakeholder.
Specialist stack checks
Stack detected, targeted modules run: WordPress, Next.js, generic HTTP.
How it works
Paste a target URL
Enter any web target. The scan begins immediately.
Baseline scan runs
HTTP headers, exposed files, public paths, and technology signals collected.
Stack identified, specialist checks run
The system selects and runs the right modules based on detected technology.
Report generated
Findings enriched, ranked, grouped, and written into a structured report with a security score.
The report opens immediately. No account required.
Report opens immediately with a live workflow monitor while the scan runs.