devtoolkit_api

Quick security audit tool for websites — SSL, headers, DNS in one scan

https://discuss.tchncs.de/post/56784583

Quick security audit tool for websites — SSL, headers, DNS in one scan - tchncs

Made a free tool for quick website security audits. Paste a URL, get a letter grade. What it checks: - SSL cert validity + days until expiry - Security headers (HSTS, CSP, XFO, XCTO, Referrer-Policy, Permissions-Policy) - DNS config (A, AAAA, MX, SPF records) - TTFB response speed http://5.78.129.127/security-scan [http://5.78.129.127/security-scan] The individual checks are also available as API endpoints you can use in monitoring scripts or cron jobs: curl http://5.78.129.127/api/ssl/yourdomain.com curl http://5.78.129.127/api/dns/lookup/yourdomain.com Free, no signup. What checks would you add?

Mar 18 at 1:40amWeb
Show threadkenMar 18
This is terrible for privacy due to cleartext HTTP. At minimum fix your TLS before spamming further, please.
5 privacy leaks your browser has right now — and free tools to test each one - tchncs

Most people think incognito mode = invisible. It doesn’t even come close. I’ve been building free privacy testing tools and these are the 5 most common leaks I see: 1. DNS Leaks — Even with a VPN, your DNS queries might bypass the tunnel. Your ISP sees every domain you visit. → Fix: Switch to encrypted DNS (1.1.1.1 or 9.9.9.9), enable DNS-over-HTTPS in Firefox settings → Test: https://devtoolkit.dev/dns-leak [https://devtoolkit.dev/dns-leak] 2. WebRTC Leaks — Reveals your real IP address behind VPN. Takes 3 lines of JavaScript. → Fix: Firefox about:config → media.peerconnection.enabled = false 3. Missing Security Headers — Sites without CSP, HSTS, X-Frame-Options leave you open to clickjacking and XSS → Fix: Use HTTPS-only mode, install uBlock Origin → Test: https://devtoolkit.dev/headers [https://devtoolkit.dev/headers] 4. Browser Fingerprinting — 83.6% of browsers have a unique fingerprint. No cookies needed. → Fix: Firefox privacy.resistFingerprinting = true, or use Tor Browser 5. Weak Connection Security — Outdated TLS, weak ciphers, missing HSTS → Fix: Update your browser I built a free tool that tests all 5 at once and gives you a privacy score out of 100: https://devtoolkit.dev/privacy-audit [https://devtoolkit.dev/privacy-audit] No signup, no tracking, no data collection. Source is open. What other browser privacy leaks have you found that most people don’t know about?