Scan Your Website's Security in 30 Seconds

CyberReflex checks the surface area most teams miss first: TLS health, headers, DNS posture, public exposures, cookies, redirect hygiene, and stack disclosures. The output is written for humans, not just scanners.

8 parallel checks

AI summary + fix plan

Supabase-ready history storage

Coverage

Security lenses stitched into one scorecard.

Output

A+ to F

Weighted grading with visible issue severity.

Audience

Ops

Clear enough for clients, useful enough for engineers.

Live scanner

Enter a URL and get a weighted report with practical next steps.

Node runtime checks

How It Works

One input, one scan, one readable plan.

Submit Any URL

Drop in a production domain, staging site, or client hostname. CyberReflex normalizes the target and starts the probe chain immediately.

Run Security Checks

The scan executes TLS, header, DNS, redirect, cookie, exposure, and basic port checks in parallel to keep response times tight.

Read the Fix Plan

Results come back as a plain-English scorecard with severity, reasoning, and remediation guidance instead of raw headers alone.

What We Check

Built for the problems that actually show up in external reviews.

SSL / TLS

Certificate validity, issuer trust, protocol version, and near-expiry risk.

HTTP Security Headers

HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

DNS Hygiene

SPF, DMARC, mail exposure context, and nameserver redundancy.

Basic Port Exposure

Best-effort checks for public SSH, FTP, SMTP, database, Redis, and alternate web ports.

Technology Footprints

Framework and platform clues from headers and markup, including overexposed server signatures.

Cookie Security

Secure, HttpOnly, SameSite, and cross-site cookie combinations that expand session risk.

Exposed Files

Probes for `.env`, `.git`, backup archives, phpinfo, server-status, and common debug endpoints.

Redirect Chain

Too many hops, HTTP-to-HTTPS enforcement, canonical routing, and loop detection.

Why CyberReflex

Security headers alone do not explain what to fix next.

The scanner is opinionated about triage. It keeps technical detail visible, but it also translates findings into a short remediation narrative so teams can move from “something is wrong” to “here is the next change to ship.”

Deployment

Next.js App Router frontend and API routes.

Optional Supabase persistence through Prisma.

Optional OpenAI summary layer for human-readable reporting.

Designed for Vercel deployment and custom-domain launch.