Application Security • Legal Passive Mode
Website risk assessment without offensive testing.
Review public security configuration, headers, cookies, visible forms, external scripts, robots metadata, and OWASP-style risk categories from one clean report.
Headers
HTTPS
Cookies
Forms
Report
TLS
Policy review
CORS
Page coverage
Security Score
—
Run an assessment first.
Total Findings
—
Passive findings only
High/Critical
—
Prioritise these first
Assessed Target
—
No scan yet
Scope and evidence
Page coverage
Run an assessment to see the pages reviewed.
| Page | HTTP | Forms | Scripts | Cookies |
|---|---|---|---|---|
| No scan yet. | ||||
Severity distribution
Risk overview
OWASP-style mapping
Findings register
| ID | Finding | Severity | Risk Category | Evidence | Recommendation |
|---|---|---|---|---|---|
| Run a scan to generate findings. | |||||
Technical details
Response headers
No scan yet.
Surface review
Forms, scripts, metadata
No scan yet.
Transport
TLS certificate
Run an assessment to review TLS.
Policy review
CSP and HSTS
Run an assessment to review security policies.
Cross-origin access
CORS behaviour
Run an assessment to review CORS.
Disclosure contact
Security contact
Run an assessment to review security.txt.
Executive report
Assessment summary
Run an assessment to generate a report.