Free passive web security scanner. Check public HTTPS sites for HSTS, CSP, TLS, cookies, CORS, and DNS. No account, no email, instant results, and a downloadable PDF.
Hey Product Hunt!
KhanyaSec started from a simple idea: checking the basic security posture of a website shouldn't require a complicated setup or an expensive tool.
It runs passive, non-intrusive checks on things like security headers, SSL/TLS, certificates, cookies, DNS and email security configurations, and then explains what it finds and how you can improve it.
No agents, no installation — just enter a domain and run the scan.
KhanyaSec is still in beta, so feedback is especially valuable right now. If you try it, I'd love to hear what checks you'd like to see added or what could make the results more useful.
Thanks for checking it out!