Sentinel
A real, working web security scanner.
Overview
Sentinel is a working security tool, not just a UI. Enter a website you own and it performs a set of passive, non-intrusive checks on the server side, then produces a scored report with clear remediation.
It inspects security headers, HTTPS configuration, cookie flags and information disclosure — the same class of checks used by industry tools — and never attacks the target. It's powered by a Cloudflare Worker backend.
What it does
Screenshots
Why we built it
Most websites are missing basic security protections — and owners often have no easy way to find out. Sentinel is a working tool, not just a UI: enter a site you own and it runs real, passive security checks server-side, then returns a scored report with clear fixes.
The purpose is to show we can build genuine security tooling responsibly — performing the same class of checks industry tools use, while never attacking the target. It's the engineering behind the audits and hardening we do for clients.
How we built it
Define safe, useful checks
We scoped passive, non-intrusive checks — headers, HTTPS, cookies, info disclosure — that never attack the target.
Build the backend
A Cloudflare Worker fetches and inspects the target server-side, bypassing browser CORS limits with SSRF guards.
Score and explain
Findings are graded by severity into an A–F report, each with what it is, why it matters and how to fix it.
Ship it live
Deployed with an authorisation gate so only sites you own can be scanned.