Passive API configuration audit — HTTPS, headers, CORS signals (no exploitation).
Passive API review: HTTPS, CORS, cache, and disclosure headers — no attack payloads.
This score is a defensive configuration review — not a penetration test, CVE audit, or guarantee of security.
This scanner is part of the Cyber Security PRO add-on.
Scanning…
More from the same category
Full defensive configuration scan: TLS, headers, cookies, DNS and email auth.
Detect WordPress and review public exposure/config signals without fake CVEs.
Analyze CSP, HSTS and related HTTP security headers with remediation snippets.
Inspect Secure, HttpOnly and SameSite flags on public Set-Cookie headers.
Certificate health and TLS posture using the shared SSL engine.
Deep Content-Security-Policy review with remediation guidance.
Learn more — open a section when you need details
Passive diagnostics for a public API URL. Checks HTTPS, CORS, caching, and server disclosure — never sends exploit payloads.
Paste a public API endpoint URL.
Click Scan.
Review CORS, cache, and disclosure findings.
Use a safe health or docs endpoint you own.
Full scan — counts against monthly allowance.
No authentication brute force or injection tests.