DEV Community: TN The latest articles on DEV Community by TN (@tnuhoglu). https://dev.to/tnuhoglu https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4092531%2Fc4d727f7-74b0-4eec-b163-86666a58f305.png DEV Community: TN https://dev.to/tnuhoglu en I built a free tool that runs 614 passive security checks on any website TN Mon, 24 Aug 2026 20:54:36 +0000 https://dev.to/tnuhoglu/i-built-a-free-tool-that-runs-614-passive-security-checks-on-any-website-30hj https://dev.to/tnuhoglu/i-built-a-free-tool-that-runs-614-passive-security-checks-on-any-website-30hj <h1> I built a free tool that runs 614 passive security checks on any website </h1> <p><strong>tl;dr:</strong> <code>pip install tblue</code> → <code>tblue -u https://yoursite.com</code> → instant security grade. No account, no API key, nothing sent anywhere.</p> <h2> What it does </h2> <p>Tblue runs <strong>614 passive security checks</strong> on any website from your terminal:</p> <ul> <li>Security headers (CSP, HSTS, CORS, X-Frame-Options, 30+ more)</li> <li>Cookies (HttpOnly, Secure, SameSite for every cookie)</li> <li>Email security (SPF, DKIM, DMARC)</li> <li>Secrets in JS bundles, exposed config files, source maps</li> <li>Subdomain takeover, DNS misconfigs, typosquatting detection</li> <li>Compliance mapping: PCI-DSS, HIPAA, SOC 2, NIST CSF</li> </ul> <p><strong>Passive only</strong> — reads what your site sends back, never modifies anything.</p> <h2> Install &amp; run </h2> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code>pip <span class="nb">install </span>tblue tblue <span class="nt">-u</span> https://yoursite.com </code></pre> </div> <p>Outputs a letter grade (A+ to F), a score (0–100), and remediation steps for every finding. Generates a shareable HTML report.</p> <p>GitHub: <a href="https://github.com/taylannuhogluofficial-png/Tblue" rel="noopener noreferrer">github.com/taylannuhogluofficial-png/Tblue</a></p> <p><em>Would love to hear what you scan first. Happy to answer questions in the comments.</em></p> ai webdev opensource