Launching today
qsa.sh
External security scan of your own IP, in your terminal
50 followers
External security scan of your own IP, in your terminal
50 followers
Run curl qsa.sh for a one-command external security scan of your server's own public IP — naabu, nmap + vulners, and nuclei map your open ports, service versions, and known CVEs, streamed straight to your terminal in ~30 seconds. See exactly what the internet sees of your host: no account, nothing stored. Free scans run live; paid Pro (all 65,535 ports, async) and one-time Deep (the full nuclei firehose, emailed) dig deeper uncovering vulnerabilities below the surface.
Really like how frictionless this is. curl qsa.sh scanning the IP you're calling from means it's guaranteed your own host with no account or consent faff, which is a genuinely clever bit of design, and not retaining results is the right call for trust.
One question from my corner: for those of us mostly on serverless/edge now (Cloudflare Workers and the like) where there's no box with an open IP to point at, is there a version of this that makes sense, or is it firmly aimed at VPS/server setups? Either way, nice work.
Nice that curl here just streams text back, no piping into bash like typical installers. The 15-second abort window before scanning starts is a smart consent mechanism too.