All-in-one OSINT tool for analysing any website.
Web-Check is a comprehensive, open-source OSINT (Open Source Intelligence) tool designed to provide deep insights into the inner workings, security, and architecture of any website. It serves as an all-in-one dashboard to help users understand, optimize, and secure their web presence.
The main features of this tool include:
Network & Infrastructure Analysis: The tool retrieves IP information, including physical server location, hosting provider, and associated hostnames. It also performs DNS record lookups (A, MX, NS, TXT) and traceroutes to map out a target's network infrastructure.
Security & Encryption Auditing: Web-Check analyzes the SSL/TLS chain, checks for DNS Security Extensions (DNSSEC), and identifies HTTP security headers like HSTS, CSP, and X-Frame-Options. It can also detect Web Application Firewalls (WAF) and simulate TLS handshakes to find configuration vulnerabilities.
Performance & Quality Metrics: Integrating with Lighthouse, the tool generates scores for performance, accessibility, SEO, and best practices. It also calculates the estimated carbon footprint of a site based on data transfer and server energy usage.
Content & Technology Discovery: It identifies a site's tech stack using fingerprints for over 100+ technologies. It also parses sitemaps (listed pages), extracts all internal and external links, and analyzes social meta tags and cookies.
Domain & Reputation Tracking: The tool performs Whois lookups to find registration details and checks if a site is flagged on common malware and phishing lists. It also provides global traffic rankings and fetches the site's archive history from the Wayback Machine.
Email Configuration Checks: It assesses email security by verifying SPF, DKIM, DMARC, and BIMI records to protect against spoofing and phishing.
Flexible Deployment: Being 100% open-source (MIT License), it can be easily self-hosted using Docker, deployed on platforms like Netlify or Vercel, or run directly from the source code.