Every developer knows they should test their website for vulnerabilities. But manually checking security headers, SSL certs, CORS misconfigurations, and open ports for every site is tedious.
I built a Python tool that does it all in one command.
What it checks:
- Security headers (CSP, HSTS, X-Frame-Options, etc.)
- SSL certificate validity & expiry
- CORS misconfigurations
- Open ports
- Information disclosure
- Clickjacking protection
The best part? It runs in under 30 seconds and gives you a clear risk score with actionable fix recommendations.
I've been using this for all my client projects and decided to package it up as a Pro version with additional features:
- Unlimited scans
- Detailed PDF reports
- API access for CI/CD pipelines
- Priority updates on new vulnerability checks
Check it out: https://payhip.com/b/2HZrT
Or try the free version on my site: https://sec.92888888.xyz/websec-scanner/
Top comments (0)