HiveGuard
A website, email and domain security scanner with a verified VAPT mode — find what attackers see first, and fix it in minutes.
Overview
HiveGuard is DevHive Studio's own security product. Enter any website and it runs 60+ passive checks across the web application, HTTPS, email, DNS and the software it uses, then returns an A–F score with every finding explained in plain language — what it is, why it matters and exactly how to fix it.
For domains you own, HiveGuard unlocks VAPT mode: after a quick ownership check (a DNS record or a small file, just like Google Search Console) it runs active, non-destructive vulnerability tests — exposed secrets, risky open ports and input-handling probes. Everything runs on Cloudflare's global edge network.
What it does
60+ security checks
Security headers and CSP quality, HTTPS and HSTS, cookies, CORS, mixed content and insecure forms.
Email & domain security
SPF, DKIM, DMARC, MTA-STS, DNSSEC and CAA — including duplicate or broken records that silently disable protection.
Vulnerable software detection
Fingerprints platforms and JavaScript libraries and matches their versions against known vulnerabilities (CVE / OSV).
Subdomain & certificate intelligence
Certificate expiry and issuer, subdomain inventory from public logs and dangling records that allow subdomain takeover.
Verified VAPT mode
Exposed .env/.git/backup files, 15 risky ports, XSS, SQL-error and open-redirect probes — only on domains you have verified.
Reports that get things fixed
OWASP-mapped findings, copy-paste fixes for Nginx, Apache, Cloudflare and Node, a PDF download and a shareable link.
The outcome
A security product that turns invisible risk into a clear, prioritised checklist — safely. On our own website HiveGuard confirmed an A grade (97/100) after hardening, and the same engine powers the first step of every security audit we run for clients.
Why we built HiveGuard
Most websites are missing basic protections — security headers, email authentication, safe cookies — and their owners have no easy way to find out. Professional scanners are expensive and their reports are hard to act on.
HiveGuard gives anyone a clear, honest security picture in seconds, with fixes they can copy and paste. For deeper testing it stays responsible: active VAPT checks only ever run on domains whose owners have proven control, because probing someone else's website without permission is illegal.
The problem
Silent misconfigurations in websites, email and DNS that attackers find in minutes.
What it does
Scores six security layers A–F and explains every finding with a ready-made fix.
Why it matters
Owners fix the most dangerous gaps first — and know when to bring in a full manual VAPT.
From a simple scanner to a security product
Define safe, useful checks
We mapped what attackers look at first — headers, HTTPS, email records, DNS, exposed software — and kept every standard check passive.
Build on the edge
A Cloudflare Worker runs the checks server-side with SSRF guards, Turnstile bot protection and rate limits, so it cannot be abused.
Add verified VAPT
Ownership verification by DNS or file unlocks active, non-destructive vulnerability tests only for the right people.
Make reports actionable
A–F scoring, OWASP mapping, copy-paste fixes per platform, PDF export and shareable links — designed to get issues fixed.
Want a security tool or a full VAPT?
We build secure products and test existing ones — let's talk.
