🔐 Security Kit — Compliance Checker Demo

• OWASP Top 10 (2021) — automated checks for the most critical web security risks
• CIS benchmark guidelines — server configuration hardening checks
• Security header validation — HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
• Compliance scoring — letter-grade rating (A through F) based on pass/fail ratio
• Remediation recommendations — actionable fix for each failed check
• Multiple frameworks — run OWASP, CIS, or both with `--all`

# Quick compliance check with all frameworks
python src/compliance_checker.py --target api.example.com

# OWASP Top 10 only
python src/compliance_checker.py --target example.com --framework owasp

# Full check with JSON output
python src/compliance_checker.py --target example.com --all --output report.json

{
    "target": "https://app.example.com",
    "checks": {
        "owasp_top_10": true,
        "cis_benchmarks": true,
        "security_headers": true
    },
    "fail_threshold": 70,
    "output_format": "json"
}