You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
HTTP header security scanner. Finds Host header injection, web cache poisoning, request smuggling and unkeyed-input gadgets, assesses HSTS/CSP/cookie posture, confirms every finding with a second probe, maps it to OWASP ASVS 5.0 and PCI DSS 4.0.1 — and reports what it could not assess instead of counting it as a pass.
Passive Chrome extension that flags web cache deception signals while you browse - it spots the static-path and delimiter mismatch, and never sends a request of its own.