Hey Product Hunt community! 👋 Before every security audit or product deploy, developers waste 15 minutes doing the exact same manual checks: `curl -I`, squinting at headers, checking DevTools for mixed content, and searching CVE databases for outdated JavaScript libraries. Because it's tedious, people skip it and misconfigurations ship to production. I built QuickAudit to turn that 15-minute routine into a 5-second, 1-click browser extension. 🔍 What QuickAudit checks in 1 click: 1. Transport Security (HTTPS & HSTS configuration) 2. Content-Security-Policy (CSP evaluation & strictness) 3. Clickjacking Protection (frame-ancestors / X-Frame-Options) 4. MIME-Sniffing Prevention (nosniff) 5. Referrer & Permissions Policies 6. Cookie Security Flags (Secure, HttpOnly, SameSite) 7. Mixed Content Detection (Active & Passive) 8. Vulnerable JS Libraries (Live batch-queried against OSV.dev not a hardcoded list!) 9. Exposed Sensitive Files (/.env, /.git/HEAD - off by default with owner consent) 10. Server Version Disclosure 🔒 Built Privacy-First: • 100% of checks execute locally inside your browser. • Zero telemetry, zero tracking, zero account required. • Host access requested per-site on demand. It's free, open-source, and live on Chrome, Edge, and Firefox. I’d love to get your thoughts, feedback, or any edge cases you find!

QuickAudit

10-point OWASP web security checklist in 1 click

10-point OWASP web security checklist in 1 click