AI WebSec Scan

AI WebSec Scan is a lightweight, passive website security scanner built for AI agents, automation pipelines, and reconnaissance workflows.

It performs non-intrusive checks only and outputs clean, structured JSON for direct LLM consumption.

Features

• Passive reconnaissance (safe, no exploitation)
• HTTPS / TLS enforcement detection
• Security header analysis:
  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Strict-Transport-Security
  • Referrer-Policy
• Server header fingerprinting
• robots.txt existence and accessibility check
• AI-native JSON output

Installation

git clone https://github.com/21tash/ai-websec-scan.git
cd ai-websec-scan
pip install -r requirements.txt