Security Tooling

SecurePeek

Automated Website Security Auditing

A full-stack audit platform that scans any public domain for SSL health, security headers, HTTPS configuration, server exposure, and common web vulnerabilities — then turns the raw findings into a single score with fixes a site owner can actually act on.

Visit live site

Architecture & Process

Context: Most site owners have no idea their headers are misconfigured until something breaks. Existing scanners either cost enterprise money or dump unreadable JSON. SecurePeek closes that gap with a one-input scan and a plain-English report.
Role: End-to-end: scanning engine, scoring model, REST API in Express, and the entire React dashboard including the report UI.
Key Engineering Decision: Weighted composite scoring — each check carries a severity weight instead of a flat pass/fail count, so one missing CSP header outranks five cosmetic warnings. The report sorts by remediation impact, not by scan order.

Engineering Stack

Full Stack

Frontend

React.js · Tailwind CSS · Vite

Backend & Scanning

Node.js · Express.js · TLS/SSL inspection · Header analysis

Security Domain

OWASP checks · Certificate chain validation · Server fingerprinting

Built with

React.jsNode.jsExpress.jsCybersecurity

Next project

AuraWash