Web Security Scanner

Python tooling that automates common web checks — headers, CORS, redirects, brute-force, uploads — and produces a readable HTML report.

~10–16Check categories

~3–8 minTypical triage run

1 reportHTML, actionable

Use case

Fast security triage before launch, during maintenance, or across a site fleet.

Problem

Checks happen ad-hoc; basics get missed until something breaks or is exploited.

Outcome

Automated checks plus a report so issues surface early and fixes can be tracked.

Lab notes

Constraints

CLI-first; no agent required on target hosts; report must be readable without a dashboard.

Tradeoffs

Breadth over depth — catches common misses fast; not a full pentest substitute.

What I’d redo

Stronger baseline profiles per stack (WP / API / static) and clearer severity grouping.

PythonSecurityReporting

GitHub All projects