IaC Security Misconfiguration Scanner API

Website Security Auditor

zyrox/website-security-auditor

A powerful security tool to scan websites for exposed API keys and XSS vulnerabilities.

Analyze HTTP security headers of any website. Check for Content-Security-Policy, HSTS, X-Frame-Options, and 15+ other security headers. Includes security ratings and recommendations. Essential for security audits and compliance testing.

Security Headers Checker API for bulk HTTP security scans. Audit HSTS, CSP, X-Frame-Options, referrer and permissions policies, missing headers, website hardening gaps, and compliance posture. Returns grades, findings, and header evidence for security audits.

Check websites for security.txt, extract security contacts, expiry, policy, hiring and compliance fields.

Detect any website's full technology stack (CMS, JS frameworks, analytics, e-commerce, CDN) plus a security-header grade, contact emails and social profiles — all in one scan. Perfect for lead qualification, competitor research, and SEO audits.

Track reviewed GitHub Security Advisories by ecosystem and severity.

Scan HTTP security headers for any URL. Returns A+ to F grade, per-header pass/weak/missing status (CSP, HSTS, X-Frame-Options), and Nginx/Apache/Express/Cloudflare fix snippets. Use for security audits, compliance checks, vendor review. Input: url or urls[]. Output: JSON grade report.

Infrastructure Security Advisory Normalizer

hankel_labs/infrastructure-advisory-normalizer

Normalize CERT-Bund and Microsoft MSRC security advisories into one consistent schema. Match findings to your infrastructure stack, enrich them with CISA KEV and EPSS data, and prioritize them using a transparent, deterministic risk score.

Scrape Terraform Registry to find B2B infrastructure companies that publish Terraform providers. Returns namespace, provider name, tier, download count, GitHub repo, registry URL, and publish date. Perfect for DevRel, cloud vendor outreach, and DevOps tooling sales.