Features

This chapter covers the core features and capabilities of Compliance Checker.

Features

• OWASP Top 10 (2021) — automated checks for the most critical web security risks
• CIS benchmark guidelines — server configuration hardening checks
• Security header validation — HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
• Compliance scoring — letter-grade rating (A through F) based on pass/fail ratio
• Remediation recommendations — actionable fix for each failed check
• Multiple frameworks — run OWASP, CIS, or both with --all
• CI/CD friendly — exit codes and pass/fail thresholds for automated pipelines
• JSON and console output — structured data or human-readable reports
• Non-destructive — all checks are passive HTTP requests

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get Compliance Checker up and running in your environment.

Quick Start

# Quick compliance check with all frameworks
python src/compliance_checker.py --target api.docs.example.com

# OWASP Top 10 only
python src/compliance_checker.py --target docs.example.com --framework owasp

# Full check with JSON output
python src/compliance_checker.py --target docs.example.com --all --output report.json

Output

The report includes a compliance score, a categorized list of passed/failed checks, and specific remediation steps for each failure. JSON output is structured for integration with dashboards or ticketing systems.