Repolode
Submit
lissy93

lissy93/web-check

All-in-one open source intelligence tool that runs on-demand checks on any website, covering DNS, SSL, headers, server info and security configuration.

Open-source alternative to:SecurityTrailsShodan

View on GitHubWebsite
Stars
35,162
Forks
2,900
Open issues
2
Last commit
20 hours ago

What is it?

Web-Check takes a URL and returns a broad profile of the site: its IP and hosting details, DNS and SSL certificate records, HTTP headers, detected technologies, open ports, traceroute output and other security-relevant configuration. It is aimed at people who want to understand how a website is built and where its weak points might be, whether they run it themselves or are assessing a third-party site.

The project is a TypeScript app with a web interface and an API, and it can be deployed to Netlify, Vercel, Render, Docker or run from source. No configuration is needed for the default checks. Optional API keys for services such as Google PageSpeed, Shodan, Tranco and GitHub unlock additional checks or raise rate limits. Some checks need chromium, traceroute or dns installed locally and are skipped when those tools are missing.

Operators can restrict which checks run with enabled and disabled lists, block certain hosts from being scanned, enable rate limiting and set CORS origins, which makes it practical to host for an internal team.

Key features

  • 01Collects IP, hosting and server details for a given URL.
  • 02Inspects DNS records, SSL certificates and HTTP headers.
  • 03Detects technologies used by a site and reviews security configuration.
  • 04Runs traceroute and port checks, plus optional threat and reputation lookups.
  • 05Lets operators enable or disable individual checks and block specific hosts.

Use cases

  • Auditing the security configuration of your own website before launch.
  • Investigating a suspicious domain's hosting, certificates and infrastructure.
  • Hosting an internal website-analysis tool for a team with access controls.
  • Learning which technologies and services a site relies on.

Quick start

  1. 1

    Clone the repository

    git clone https://github.com/Lissy93/web-check.git
  2. 2

    Enter the project directory

    cd web-check
  3. 3

    Install dependencies

    yarn install
  4. 4

    Build and start the app (API and GUI)

    yarn build && yarn start

Things to know

  • Some checks need Chromium, traceroute or dns installed, and are skipped otherwise.
  • Several checks need optional API keys (Google, Shodan, Cloudmersive, Tranco, GitHub, CertSpotter) to work fully.
  • Requires Node.js v22.22.3+ or v24.16+ and yarn.

Topics

#osint#security#website-analysis#dns#ssl#reconnaissance#typescript#self-hosted#privacy#security-tools

FAQ

What is web-check?
All-in-one open source intelligence tool that runs on-demand checks on any website, covering DNS, SSL, headers, server info and security configuration. Web-Check takes a URL and returns a broad profile of the site: its IP and hosting details, DNS and SSL certificate records, HTTP headers, detected technologies, open ports, traceroute output and other security-relevant configuration. It is aimed at people who want to understand how a website is built and where its weak points might be, whether they run it themselves or are assessing a third-party site.
Is web-check free to use? What license does it have?
web-check is open source under the MIT license. Check the license terms before using it in commercial products.
Is web-check still maintained?
Actively maintained. The last commit to web-check was on Oct 19, 2026.
What can I use web-check for?
Auditing the security configuration of your own website before launch. Investigating a suspicious domain's hosting, certificates and infrastructure. Hosting an internal website-analysis tool for a team with access controls. Learning which technologies and services a site relies on.
How do I install web-check?
Clone the repository: git clone https://github.com/Lissy93/web-check.git Enter the project directory: cd web-check Install dependencies: yarn install Build and start the app (API and GUI): yarn build && yarn start
Where can I get web-check?
The source code and installation instructions are on GitHub: https://github.com/lissy93/web-check

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects