Website Security Scanner

What this static tool can check

This page provides a local URL-structure check and a manual evidence workflow. It cannot scan another website’s server, read cross-origin headers, or certify that vulnerabilities are absent. Work only on sites you own or have authorisation to assess; use approved live assessment tools for active testing.

Reading and acting on evidence

Record the inspected route and time, browser certificate details, response headers obtained by an authorised reviewer, and observed application behaviour. Missing or inconsistent controls require application-specific review. A header appearing once does not prove that every route or error response has the same protection.

Fix and recheck

Assign each issue to an owner with an expected behaviour and reproducible verification step. Test proposed header changes against real scripts, authentication and embedded resources. Keep before/after evidence and regression results. Schedule a recurring review through your existing operations process; this static site creates no monitoring job.