✅ Compliance Checker

$9.99

Audit your web app against the OWASP Top 10 and common security headers spec. Point it at a URL and get a compliance scorecard with pass/fail breakdown, severity ratings, and remediation links. Read-only — safe for production.

• OWASP Top 10 checks: injection, broken auth, XSS, IDOR, misconfig
• Security headers: CSP, HSTS, X-Frame-Options, Referrer-Policy
• Cookie flag auditor (Secure, HttpOnly, SameSite)
• TLS version and cipher suite validation
• CORS policy checker
• HTML + JSON scorecard output with per-item severity
• CI-friendly exit codes (0 = pass, 1 = fail)

# Audit a URL
python check.py --url https://example.com

# Full audit with output
python check.py --url https://app.example.com --output report.html

# CI mode (exits 1 on any HIGH severity)
python check.py --url https://example.com --ci --min-severity HIGH

Related tools