Checks

Every check below runs as part of cache-detective scan. Checks tagged aggressive-only only run with --aggressive (see scan).

Cacheability analysis RFC 9111 Cache-Control/Expires/Pragma/Vary parsing and defaults.

Live cache state HIT/MISS/STALE/EXPIRED/BYPASS detection via known CDN headers.

CDN fingerprinting Identifying the fronting CDN/reverse proxy.

Cache key & Vary Declared vs. observed cache-key inclusion.

Cache poisoning & deception Aggressive-only probes for exploitable cache behavior.

Response consistency Conditional-request handling and redirect caching.

Stale-serving behavior Confirms stale-while-revalidate/stale-if-error are actually honored.

Severity model

Findings are classified critical/high/medium/low/info, following reportx’s severity scale. A finding’s severity/CVSS/CWE/OWASP metadata comes from the check that raised it — see the “Design notes” section of the project README for why security-relevant misconfigurations (like an authenticated response marked cacheable) are split into their own check rather than sharing a general-purpose one.