Read-only security audit
See your attack surface before someone else does
Choose a bundled synthetic target and run the same four check families used by
src/vulnerability_scanner.py: TCP ports, HTTP security-header presence, SSL/TLS and path-exposure checks.
Nothing leaves this page.
⌁ Configure scan
Quick checks the default 24 ports plus HTTP headers. Full adds SSL certificate validation and path-exposure checks.
◉ Open Ports
▤ HTTP Headers
Response-header audit for HSTS, clickjacking, content injection and MIME sniffing defenses.
◇ SSL/TLS
Certificate chain, hostname, expiry, protocol and cipher posture.
⚠ Exposed Paths
Sends HEAD requests to common paths that may leak configuration, credentials, or version information.
{ } Raw Output
Structured exactly like the scanner's ScanResult.summary() and ScanResult.to_json() output.
CONSOLE · vulnerability_scanner.py
🔒 This demo scans bundled synthetic targets. The full product scans any real host.
src/vulnerability_scanner.py— Scanner with 24 default TCP ports, SSL/TLS validation, HTTP header presence audit, and path-exposure checksexamples/scan_config.json— Illustrative settings reference; scanner options are passed directly through CLI argumentsguide/— Comprehensive usage guide with best practices- Output: JSON for automation, console for quick checks, severity-tagged findings
- Custom comma-separated ports (
--ports) and full scan mode (--full) - Zero dependencies — Python 3.10+ stdlib only, non-destructive (read-only)