I built Scanward to solve a problem I kept running into as a DevOps engineer: checking whether a domain has its security basics covered (SSL config, DNS hygiene, HTTP security headers, SPF/DKIM/DMARC) meant juggling 4-5 different tools.
Scanward runs all 5 checks in one scan and gives you an A-F grade with specific findings. The free public scanner requires no signup.
If you create an account (free tier: 1 domain), it does continuous monitoring and emails you when something changes — cert expiring, grade drops, missing headers, etc.
Tech stack: FastAPI + Celery + PostgreSQL + Redis on Railway. Next.js dashboard on Cloudflare Pages. All scanning uses public data (DNS queries, HTTP headers, SSL handshakes) — no agents to install.
Would love feedback on the scoring methodology and what checks you'd want to see added.
Comments URL: https://news.ycombinator.com/item?id=47055885
Points: 1
# Comments: 0