IMAGEJust finished building a security audit toolJust finished building a security audit tool It started because I kept running my site through Mozilla's Observatory and wanted to understand exactly how it scored things. If you read their docs, they explain how the scoring blocks break down and if you dig deeper, how the individual bits inside those blocks are scored too. So I reflected that same scoring into my own tool. Then came the grind: run my site through Observatory, change one thing, test again, over and over, until my scores matched theirs section by section. Once it lined up with Mozilla, I had a scoring chart that mirrored Observatory for every parameter. From there I started building depth into it, DNS, mail-spoofing protection (SPF/DMARC/DKIM), known software vulnerabilities via the CVE database, the stuff Observatory doesn't touch. So now it does everything Observatory does, plus a fair bit more. I've tested it against 200 of the internet's biggest sites and CMS platforms to make sure it holds up, real varying scores,
