SecURL passively grades headers, TLS, certificates, DNS trust, cookies, and visible third-party exposure. Run it on the web or from npm, then save important targets for quiet drift monitoring. No credentials or invasive probing.
I built SecURL for low-noise external posture review of public sites. It reads what a browser, auditor, or researcher can already see, headers, TLS, cookies, redirects, and DNS/email posture, then turns that into clear findings and stakeholder-ready reports, without noisy recon. There is a free hosted scanner and an npm engine. Would love feedback from this community: https://securl.online
