GradeJS analyzes production Webpack bundles without having access to the source code of a website. Instantly see vulnerabilities, outdated packages, and more just by entering a web application URL.

X-snifer is a versatile tool designed for scanning and gathering information from a website and simplifying various website analysis and network reconnaissance tasks.

Audit, clean, and harden a WordPress site end to end, with an AI agent (Claude/Cursor/Codex/MCP or SSH). Detects & removes hidden malware — cloaking, backdoors, database injection — scores your security posture, and hardens safely. Free, open-source (AGPL-3.0).

information about website GDPR compliance

cPanel Linux Malware Detect

#1 Open WordPress vulnerability database tracking 27,000+ issues (plugins, themes, core). Updated On Daily Basis. Formats: SQLite, CSV, Excel.

🛡️ Strainr is a pretty web app security scanner 🛡️

🕷️ | ReconX is a Live-Website Crawler made to gather critical information with an option to take a picture of each site crawled!

A classical Frameblocker for Websites

I find vulnerabilities in web applications before attackers do. I test web apps, APIs, and mobile apps from an attacker's point of view. I look for flaws like IDOR, XSS, SSRF, CORS issues, access control problems, and other security misconfigurations.

Website security scanner in your terminal. Zero config. One command. 7 checks in under 1 second.

🔒 CLI tool for analyzing website security headers. Checks 15+ security headers, provides detailed reports, and exports to TXT/JSON/CSV. Perfect for security audits and compliance checks.

ShadowLink is a powerful web endpoint scanner built for ethical hackers, bug bounty hunters, and security researchers. It intelligently discovers hidden, sensitive, and potentially vulnerable endpoints by analyzing HTML, JavaScript, robots.txt, and sitemap.xml files.

We are going to go through some techniques and common PHP use cases for Website Security. Website security is often overlooked- and that’s understandable, but basic security can be put down to lots of techniques.

SecuriScan is a Python tool that scans websites for security vulnerabilities, including outdated libraries, exposed admin panels, missing security headers, and advanced threats like CSRF and XSS. It helps detect common vulnerabilities, ensuring your website is secure and protected against attacks.

CyberKit is an open-source cybersecurity tool suite designed for security professionals, developers, and enthusiasts. It offers a collection of utilities for analyzing, testing, and managing the security of applications and networks.

A lightweight Python-based web scanner that inspects websites for common client-side vulnerabilities such as missing security headers, clickjacking issues, JavaScript exposure, and insecure form behaviors.

A javascript library to display warning aginst self XSS attacks

VulnChk is a security tool designed to scan websites for common vulnerabilities such as SQL injection, XSS, and missing security headers. It also checks for known CVEs and provides detailed reports, helping web administrators assess and improve site security.

PHP Captcha library