Security Headers : I built securityheaders.io after deploying security headers like CSP and HSTS to my own site. I wanted a quick and easy way to check if other sites we...
mitmproxy : mitmproxy is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing. It can be used to intercept, inspect, modify...
Wapiti : Wapiti allows you to audit the security of your web applications.
It performs "black-box" scans, i.e. it does not study the source code of the applica...
mountebank : mountebank is the first open source tool to provide cross-platform, multi-protocol test doubles over the wire. Simply point your application under tes...
Bandit : Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs approp...
Get an instant report of how your website measures up to the best practices.
Check connection encryption, content security, information disclosure and cookies. Compare your results with today's top sites.