Get Started

TLS/Transport

Protocol version, cipher strength/forward secrecy, certificate chain/expiry/hostname, OCSP stapling, HTTPS redirect, and HSTS.

HTTP Security Headers

CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, banner disclosure, and cookie flags.

Header Trust Boundary

X-Forwarded-For, X-Real-IP, True-Client-IP, X-Forwarded-Host, and RFC 7239 Forwarded consistency.

Information Disclosure

Verbose error pages, exposed proxy admin/status interfaces, directory listing, and config/secrets file exposure.

Quick start

proxyaudit scan https://proxy.example.com

Every check is non-destructive and read-only (single or few requests, no brute-forcing or state mutation). Exit codes are CI-friendly: 0 no findings, 1 findings present, 2 runtime/connection error.

Installation Install via go install, Homebrew, Docker, or from source.

Checks Browse every check, its CWE/OWASP mapping, and severity.

CLI reference Flags and usage for the scan command.

GitHub Actions Run proxyaudit in CI to catch misconfigurations before they ship.