QuickAuditQuickAudit: web security checklist
Ten OWASP-style security checks on the page you are viewing, in one click: HTTPS and HSTS, Content-Security-Policy, clickjacking protection, cookie flags, mixed content, JavaScript libraries with known CVEs, and more.
Private by design. The only data that leaves your device is the name and version of JavaScript libraries found on the page, sent to the public OSV.dev database to look up known advisories. No URLs, no page content, no cookie values, no analytics, no account.
Nine of the ten checks are passive: they read what the page already sent your browser. The exposed-files check is off by default and only runs on the site you are on, after you confirm you are authorised to test it.