Website Security Audit • Engine 01

Live Website Security Audit

Review HTTPS configuration, response headers, cookie handling, exposed metadata, and technology fingerprints from the live target.

Accepts domain (mysite.io) or full URL (https://mysite.io).
Quick Test:
6 Security Headers

HSTS, CSP, X-Frame-Options, X-Content-Type, Referrer-Policy, Permissions-Policy.

Cookie Protection

Audits Secure, HttpOnly, and SameSite attribute flags on all Set-Cookie headers.

Tech Stack Fingerprint

Passive categorization for CMS, frameworks, servers, runtimes, and CDNs.

Sensitive Surfaces

Inspects configuration endpoints for leaked admin, backup, or git directories.

TLS & Cipher Audit

Verifies plain HTTP to encrypted HTTPS auto-redirects and cipher strength.

Positive Defenses

Explicitly verifies and logs every passing defensive control and active shield.