Application Security • Legal Passive Mode

Website risk assessment without offensive testing.

Review public security configuration, headers, cookies, visible forms, external scripts, robots metadata, and OWASP-style risk categories from one clean report.

Headers HTTPS Cookies Forms Report

New assessment

Target website

Permission required
Backend connection settings
Saved in this browser. Set window.SITE_SCANNER_API_URL in config.js to hide this step for users.

Ready to run a legal passive assessment.

Security Score —

Run an assessment first.

Total Findings —

Passive findings only

High/Critical —

Prioritise these first

Assessed Target —

No scan yet

Severity distribution

Risk overview

No results yet.

OWASP-style mapping

Findings register

ID Finding Severity Risk Category Evidence Recommendation
Run a scan to generate findings.

Technical details

Response headers

No scan yet.

Surface review

Forms, scripts, metadata

No scan yet.

Executive report

Assessment summary

Run an assessment to generate a report.