It analyzes: - Security headers (CSP, HSTS, X-Frame-Options) - Cookie security flags - Vulnerable JS libraries (jQuery, Angular, Lodash with CVE info) - Mixed content - Basic XSS patterns - Sensitive data exposure in source

Everything runs locally in the browser. No data sent anywhere. Exports HTML reports.

Chrome Web Store: https://chromewebstore.google.com/detail/securiscan-web-secu...

Also launched on Product Hunt today if you want to check it out there. https://www.producthunt.com/posts/securiscan/maker-invite?co...

Feedback welcome. Planning to add more vulnerability signatures in v1.1.