Audit a public-facing site or server for common misconfigurations without sending exploit traffic. Covers DNS hygiene, TLS and HSTS, security headers, exposed paths (.git, .env, backups), cookie flags, and software fingerprinting. Invoke when onboarding a new client site, before launch, after infrastructure changes, or as periodic re-audit.
1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completaRecolher descrição
Site / Server Audit
A read-only, non-intrusive checklist for assessing the security posture of a website you have authorization to audit. Every check is passive — it does not exploit, brute-force, or modify the target.
When to invoke
Onboarding a new client site, before deploy, after an infrastructure change
Periodic re-audit (quarterly is a reasonable cadence for production)
After any security advisory affecting the stack (Apache/nginx/PHP/WordPress/Node)
When deciding whether t
[Description truncada. Veja o README completo no GitHub.]
