About the project
Built with React and Vite, the platform allows users to submit a public HTTP or HTTPS target and receive an assessment covering DNS resolution, HTTP status and redirects, security headers, cookie attributes, mixed content, and TLS certificate health. A guarded Vercel serverless endpoint validates targets, rejects private and reserved IP addresses, restricts ports, limits requests, and applies rate limiting to reduce abuse.
The reporting interface includes scan progress, a visual risk score, severity-based finding filters, and downloadable JSON reports. Automated tests cover target normalization, unsafe-target rejection, finding analysis, and risk scoring.
VECTOR/SEC is an MVP for preliminary security triage, not a full vulnerability scanner or a replacement for penetration testing.
