Total KB References
164
Grounded Security Passages
Executable Audit Rules
74 Active
Book-Grounded Scanner Probes
Standards & CWE Catalog
75
OWASP, MITRE, NIST, ISO, RFCs
Cybersecurity Books
65
Books & Ingested PDFs
Live Scan Usage
0
Real Scans Run on This Site
Audit Target URL & Authenticated Scan Options
Knowledge Base Audit Engine • 164 References & 74 Active Book-Grounded Rules Loaded Click to view dynamic KB rules →
HIGH
sql-injection-surface
(sqli)
OWASP-A03-INJECTION
CWE-89
MEDIUM
reflected-xss-surface
(xss)
OWASP-A03-INJECTION
CWE-79
HIGH
strict-transport-security
(header_required)
OWASP-SEC-HEADERS
CWE-319
HIGH
content-security-policy
(header_required)
OWASP-SEC-HEADERS
CWE-79
LOW
x-content-type-options
(header_required)
OWASP-SEC-HEADERS
CWE-16
LOW
referrer-policy
(header_required)
OWASP-SEC-HEADERS
CWE-200
LOW
permissions-policy
(header_required)
OWASP-SEC-HEADERS
CWE-16
LOW
cross-origin-opener-policy
(header_required)
OWASP-SEC-HEADERS
CWE-693
LOW
cross-origin-embedder-policy
(header_required)
OWASP-SEC-HEADERS
CWE-693
LOW
cross-origin-resource-policy
(header_required)
OWASP-SEC-HEADERS
CWE-693
LOW
cache-control
(header_required)
OWASP-SEC-HEADERS
CWE-524
MEDIUM
content-type
(header_required)
OWASP-SEC-HEADERS
CWE-436
MEDIUM
x-frame-options
(header_required)
OWASP-CLICKJACK
CWE-1021
HIGH
Secure
(cookie_flag)
OWASP-SESSION
CWE-614
HIGH
HttpOnly
(cookie_flag)
OWASP-SESSION
CWE-1004
MEDIUM
SameSite
(cookie_flag)
OWASP-SESSION
CWE-1275
MEDIUM
CWE-601
(open_redirect)
CWE-601
CWE-601
MEDIUM
open-redirect-next-param
(code_review)
CWE-601
CWE-601
HIGH
CWE-200-SENSITIVE
(sensitive_paths)
CWE-200-SENSITIVE
CWE-200
MEDIUM
CWE-749
(http_methods)
CWE-749
CWE-749
HIGH
sql-string-concat
(code_review)
CWE-89
CWE-89
HIGH
execute-fstring-sql
(code_review)
CWE-89
CWE-89
HIGH
php-query-var-concat
(code_review)
CWE-89
CWE-89
HIGH
js-template-literal-sql
(code_review)
CWE-89
CWE-89
HIGH
java-statement-execute-concat
(code_review)
CWE-89
CWE-89
HIGH
innerHTML-assign
(code_review)
CWE-79
CWE-79
HIGH
insertadjacenthtml
(code_review)
CWE-79
CWE-79
MEDIUM
document-write
(code_review)
CWE-79
CWE-79
HIGH
react-dangerouslysetinnerhtml
(code_review)
CWE-79
CWE-79
HIGH
vue-v-html
(code_review)
CWE-79
CWE-79
MEDIUM
jinja-safe-filter
(code_review)
CWE-79
CWE-79
MEDIUM
ejs-unescaped-output
(code_review)
CWE-79
CWE-79
HIGH
tls-verification-disabled
(code_review)
CWE-295
CWE-295
HIGH
jwt-alg-none
(code_review)
OWASP-API-2023-AUTH
CWE-287
LOW
insecure-authz-comment
(code_review)
OWASP-API-2023-AUTH
CWE-285
LOW
ddos-mitigation-posture
(ddos_mitigation)
ATTACK-T1498-DOS
CWE-400
HIGH
python-pickle-load
(code_review)
CWE-502-DESERIALIZATION
CWE-502
MEDIUM
yaml-unsafe-load
(code_review)
CWE-502-DESERIALIZATION
CWE-502
HIGH
php-unserialize
(code_review)
CWE-502-DESERIALIZATION
CWE-502
HIGH
java-objectinputstream
(code_review)
CWE-502-DESERIALIZATION
CWE-502
HIGH
node-serialize
(code_review)
CWE-502-DESERIALIZATION
CWE-502
HIGH
known-vulnerable-dependency
(dependency_scan)
OWASP-SCVS-SUPPLYCHAIN
CWE-1104
HIGH
python-command-shell
(code_review)
CWE-78
CWE-78
HIGH
php-command-exec
(code_review)
CWE-78
CWE-78
HIGH
node-child-process-exec
(code_review)
CWE-78
CWE-78
HIGH
java-runtime-exec
(code_review)
CWE-78
CWE-78
HIGH
python-eval-exec
(code_review)
CWE-94
CWE-94
HIGH
js-eval
(code_review)
CWE-94
CWE-94
HIGH
urlopen-user-input
(code_review)
CWE-918
CWE-918
HIGH
requests-user-supplied-url
(code_review)
CWE-918
CWE-918
HIGH
js-fetch-user-url
(code_review)
CWE-918
CWE-918
HIGH
php-file-get-contents-var
(code_review)
CWE-918
CWE-918
MEDIUM
java-openconnection-var
(code_review)
CWE-918
CWE-918
MEDIUM
php-upload-unvalidated
(code_review)
CWE-434
CWE-434
HIGH
hardcoded-password
(code_review)
CWE-798
CWE-798
HIGH
hardcoded-api-key
(code_review)
CWE-798
CWE-798
MEDIUM
default-credentials
(code_review)
CWE-798
CWE-798
HIGH
sql-injection
(sqli)
WSTG-INPV-05-SQLI
CWE-89
HIGH
blind-sqli-surface
(blind_sqli)
WSTG-INPV-05-SQLI
CWE-89
MEDIUM
reflected-xss-surface
(xss)
WSTG-INPV-01-XSS
CWE-79
LOW
ddos-mitigation-posture
(ddos_mitigation)
OWASP-DOS-CHEATSHEET
CWE-400
HIGH
Secure
(cookie_flag)
WSTG-SESS-04-FIXATION
CWE-384
HIGH
HttpOnly
(cookie_flag)
WSTG-SESS-04-FIXATION
CWE-384
LOW
brute-force-rate-limit-posture
(ddos_mitigation)
OWASP-RATELIMIT-BRUTEFORCE
CWE-307
MEDIUM
rate-limit-backoff-posture
(rate_limiting)
OWASP-RATELIMIT-BRUTEFORCE
CWE-307
HIGH
path-traversal-lfi-surface
(path_traversal)
WSTG-INPV-07-PATHTRAV
CWE-22
MEDIUM
file-open-tainted-path
(code_review)
WSTG-INPV-07-PATHTRAV
CWE-22
HIGH
php-include-tainted
(code_review)
WSTG-INPV-07-PATHTRAV
CWE-98
HIGH
state-changing-form-csrf-token
(csrf_token)
WSTG-SESS-05-CSRF
CWE-352
MEDIUM
rate-limit-backoff-posture
(rate_limiting)
OWASP-RATELIMIT-DEEP
CWE-307
MEDIUM
weak-hash-credential
(code_review)
CWE-327
CWE-327
HIGH
weak-cipher
(code_review)
CWE-327
CWE-327
MEDIUM
random-secret-source
(code_review)
CWE-327
CWE-330
MEDIUM
log-sensitized-secret
(code_review)
CWE-532
CWE-532
KB Self-Study & Self-Hardening
DOG-FOODING
The auditor reads its own 164 grounded references, audits this app’s own security posture against
every executable rule the books teach, applies the missing hardening to vercel.json & webui.py,
then re-audits to prove the fix loop.
Code Review, Dependency Scan & Security Test Generation
KB-GROUNDED
Static code review (SQLi, XSS, SSRF, insecure auth, deserialization, weak crypto...), dependency/advisory scanning (Log4Shell, prototype pollution, and other known CVEs), and generation of Burp Intruder / fuzzer / curl regression tests - all driven by the same knowledge-base rules.
Static Code Review
Dependency & Advisory Scan
Security Audit Progress & Grounding Engine
Ready to audit. Enter a target URL above and click Run Security Audit.
0%
1 TLS & Domain Check
2 Security Probes
3 Crawl & Entry Points
4 164 References Grounding
5 Remediation Bundle
100% Safe & Authorized Audit Guarantee • Powered by 164 Security References
Guaranteed 100% safe, non-destructive, read-only probes with zero data modification or harmful payloads. Every security check, explanation, and remediation bundle is strictly grounded in 164 authoritative security standards & curated cybersecurity books (OWASP Top 10s, MITRE CWE Catalog, ASVS v4.0.3, NIST SP 800-53/160, ISO 27001:2022, PCI DSS v4.0, CIS Benchmarks, IETF RFCs).