Web-Based Security Scanning Tool Development

I am looking for a developer to build a lightweight web-based security scanning tool that can analyze websites and detect a few common security issues.

The goal of this project is to create a simple tool where a user can enter a website URL and receive a report highlighting potential security weaknesses.

The application does not need to be extremely advanced. The focus is on a clean interface and detecting a few important vulnerabilities.

Main Features

The tool should allow the user to:

• Enter a website URL to scan
• Check if important HTTP security headers are present (Content-Security-Policy, X-Frame-Options, HSTS, etc.)
• Detect if the site is running on HTTPS or HTTP
• Identify missing security headers
• Detect exposed directories such as /admin, /login, /backup if accessible
• Provide a simple security report with warnings and recommendations

Output Example

After scanning a website, the tool should display something like:

Security Report for example.com

HTTPS Enabled: YES
HSTS Header: Missing
X-Frame-Options: Present
Content-Security-Policy: Missing
Admin Page Accessible: /admin

Security Score: 65 / 100

Technical Requirements

The developer can use any modern stack. Suggestions include:

• Node.js / Express or Python
• Simple frontend using React or plain HTML/JavaScript
• HTTP request libraries to inspect headers and endpoints

The application should be lightweight and easy to run locally.

Deliverables

• Working web application
• Source code with clear structure
• Simple instructions to run the project locally

Timeline

1–3 days.

Skills Required

Web Security
Backend Development
Web Development
JavaScript / Node.js or Python
Cybersecurity basics