GuidesHow to Test Password Strength in the Browser
Estimate entropy, crack time, and common-password warnings in the browser with Vulnify. The password is not sent to a scan server.
Security Insights Blog
Expert articles on web security, vulnerabilities, and best practices
Guides
GuidesHow to Scan Website Pages That Require a Login
Add a saved login profile to a Vulnify website scan. Optionally compare two roles. Authenticated session adds 18 credits on top of the scan depth.
GuidesHow to Scan an API from an OpenAPI, Swagger, or Postman Spec
Import OpenAPI, Swagger, or Postman into Vulnify. Review the spec, send read-only GET checks, and open the report. Later scans use 18 credits.
GuidesHow to Look Up DNS Records for a Domain
Look up A, AAAA, MX, NS, TXT, SOA, and CAA records with Vulnify, including nameserver redundancy. Then open the mail or CAA tool if you need a verdict.
GuidesHow to Find Mixed Content on an HTTPS Page
Fetch a page with Vulnify’s Mixed Content Checker. Read script and image HTTP counts, fix the URLs you control, and run the check again.
GuidesHow to Draft SPF and DMARC Records Before You Publish DNS
Draft SPF and DMARC text in Vulnify, read the lookup and p=none warnings, then publish the records in DNS and verify them.
GuidesHow to Draft Security Headers for Nginx, Apache, or Cloudflare
Generate HSTS and related header lines for Nginx, Apache, or Cloudflare. Preload stays off until you choose it. Recheck the live site after you publish.
GuidesHow to Draft a Content-Security-Policy
Draft a Content-Security-Policy for a static site, WordPress, or Shopify, then check the live header with Vulnify’s CSP Checker.
GuidesHow to Check robots.txt and Your Sitemap
Check robots.txt and sitemap.xml with Vulnify. See missing files, a block-all rule, invalid XML, and HTTP URLs, then retest after you fix them.
GuidesHow to Check a Website for Open Redirects
Test redirect parameters with Vulnify’s Open Redirect Checker. Read a confirmed finding, a bounded pass, and what to fix before you retest.