I got tired of spinning up Burp Suite or OWASP ZAP just to check if a site has proper security headers. SecuriScan runs entirely in your browser. One click analyzes: - Security headers (CSP, HSTS, X-Frame-Options) - Cookie security flags - Vulnerable JS libraries with CVE details - Mixed content issues - XSS risk patterns - Exposed API keys in source code You get a 0-100 security score with detailed findings. Export HTML reports for documentation. All analysis is local. Zero data collection.

Hey Product Hunt! 👋 Built SecuriScan because I was frustrated with the overhead of traditional security tools. Sometimes you just want to quickly check if a site has proper headers or is loading vulnerable libraries - not run a full pentest. The idea: What if security analysis could be as simple as opening DevTools? Core features: - Checks 7 critical security headers - Detects outdated jQuery, Angular, Lodash (with actual CVE numbers) - Spots mixed content, insecure forms, exposed credentials - Generates shareable HTML reports Everything runs locally in your browser. I don't collect any data - you can verify yourself since it's fully open source. Built this in a weekend sprint, now looking for feedback on what checks to add next. Thinking about: - More vulnerability signatures - CI/CD integration - Custom rule definitions Would love to hear what security checks matter most to you. What do you find yourself manually checking all the time? Thanks for checking it out!

Great tool. Congrats on the launch!

Thanks, Chilarai! Really appreciate it. Would love to hear your feedback if you get a chance to check it out!

Great tool. Congrats on the launch!

Thanks, Chilarai! Really appreciate it. Would love to hear your feedback if you get a chance to check it out!

SecuriScan

Scan any website for security flaws in one click

Scan any website for security flaws in one click