Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it.
For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on.
The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.
How to use
- 1Add it in ChatGPT
Open AttackerView in ChatGPT's Plugin directory (button above), select + to add it and sign in if asked.
- 2Use it in a chat
Type @ in the composer and pick AttackerView, or start your message with its name. ChatGPT may also suggest it when it fits what you ask.
Things to ask
- “Is my website's security set up correctly? Check example.com”
- “Are SPF and DMARC configured right for example.com?”
- “Check the security headers on example.com”