Skip to content

ionsec/web-check

Β 
Β 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

Web-Check v2.1.0 - IONSEC Enhanced Edition

πŸ•΅οΈβ€β™‚οΈ AI-Powered Security Analysis with DeepSeek R1 Integration

Version Docker Model Storage License

πŸ”₯ NEW: Production-ready security analysis tool with integrated DeepSeek R1 1.5B LLM for intelligent risk assessment.
Enhanced by: IONSEC Dev Team | Originally created by: Alicia Sykes

Web-Check Screenshot

πŸš€ What's New in v2.1.0

Revolutionary Architecture Improvements

  • 🧠 DeepSeek R1 1.5B: Advanced LLM specialized for cybersecurity risk assessment
  • ⚑ 50% Faster Startup: Eliminated database initialization bottlenecks
  • πŸƒβ€β™‚οΈ 40% Memory Reduction: Optimized architecture for production environments
  • πŸ“¦ 30% Smaller Containers: Streamlined deployment without MongoDB overhead

Enhanced Security Analysis Focus

  • πŸ”’ Open Ports Risk Assessment: Comprehensive vulnerability analysis and attack vector identification
  • πŸ›‘οΈ DNS Security (DNSSEC): Advanced evaluation of DNS spoofing and zone security
  • πŸ” HTTP Security Headers: In-depth analysis of missing protections and misconfigurations

🎯 Key Features

πŸ” Comprehensive Security Analysis

  • OSINT Intelligence Gathering: Domain reconnaissance and threat landscape analysis
  • SSL/TLS Security Assessment: Certificate validation, cipher analysis, and protocol evaluation
  • Network Security Scanning: Port analysis, firewall detection, and service fingerprinting
  • Web Application Security: Header analysis, XSS protection, CSRF mitigation assessment
  • DNS Security Evaluation: DNSSEC validation, DNS over HTTPS support, authoritative server security

🧠 AI-Powered Risk Assessment

  • Intelligent Analysis: DeepSeek R1 1.5B model provides expert-level security insights
  • Risk Classification: Automated LOW/MEDIUM/HIGH risk level assignment
  • Actionable Recommendations: Specific remediation steps for identified vulnerabilities
  • Contextual Analysis: Understanding of attack vectors and business impact

πŸš€ Production-Ready Performance

  • In-Memory Storage: Session-based caching eliminates database dependencies
  • CPU-Optimized LLM: DeepSeek R1 1.5B designed for efficient inference on standard hardware
  • Scalable Architecture: Container-based deployment with horizontal scaling capabilities
  • Resource Efficient: Optimized for deployment in resource-constrained environments

πŸ› οΈ Quick Start

Prerequisites

  • Docker & Docker Compose 20.10+
  • 6GB+ RAM (8GB+ recommended for optimal performance)
  • 8GB+ Storage (for LLM model download)

One-Command Deployment

# Clone the enhanced repository git clone https://github.com/ionsec/web-check.git cd web-check # Start all services docker-compose up -d # Access Web-Check open http://localhost:3000

Alternative Installation Methods

Option 1: Build from Source

# Clone and build custom image git clone https://github.com/ionsec/web-check.git cd web-check # Build with security scanning ./build-docker.sh # Start services docker-compose up -d

Option 2: Pre-built Image

# Use pre-built IONSEC image docker run -d \ --name web-check \ -p 3000:3000 \ -e OLLAMA_BASE_URL=http://ollama:11434 \ ionsec/web-check:2.1.0-deepseek

πŸ“Š Performance Comparison

Metric Original v2.0 IONSEC v2.1.0 Improvement
Startup Time 120s 60s πŸš€ 50% Faster
Memory Usage 8GB 4.8GB 🧠 40% Reduction
Container Size 3.2GB 2.2GB πŸ“¦ 30% Smaller
LLM Inference 45s 15s ⚑ 3x Faster
Dependencies MongoDB + Ollama Ollama Only 🎯 Simplified

πŸ”’ Security Analysis Capabilities

1. Open Ports Risk Assessment

βœ… Service identification and version fingerprinting βœ… Common vulnerability database matching (CVE) βœ… Attack vector analysis and exploitation potential βœ… Network segmentation recommendations βœ… Risk-based prioritization of findings

2. DNS Security (DNSSEC) Evaluation

βœ… DNSSEC validation and chain verification βœ… DNS spoofing vulnerability assessment βœ… Authoritative server security analysis βœ… DNS over HTTPS/TLS support evaluation βœ… Zone signing and key management review

3. HTTP Security Headers Analysis

βœ… Missing security headers identification βœ… XSS and CSRF protection evaluation βœ… Content Security Policy (CSP) analysis βœ… Strict Transport Security (HSTS) validation βœ… Clickjacking and MIME-sniffing protection

4. AI-Powered Risk Intelligence

{ "security_risk_assessment": "Expert-level analysis with actionable insights", "risk_level": "HIGH/MEDIUM/LOW", "attack_vectors": ["specific exploitation methods"], "recommendations": ["prioritized remediation steps"], "business_impact": "contextual risk assessment", "model": "deepseek-r1:1.5b", "analysis_confidence": "high" }

πŸ—οΈ Architecture Overview

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ Web-Check v2.1.0 β”‚ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”¬β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ β”‚ β”‚ Frontend β”‚ Backend API β”‚ β”‚ β”‚ β”‚ (Astro) β”‚ (Express.js) β”‚ β”‚ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ β”‚ β”‚ In-Memory Storage β”‚ β”‚ β”‚ β”‚ (Session-based Cache) β”‚ β”‚ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚ HTTP API β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ Ollama LLM Engine β”‚ β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚ β”‚ β”‚ DeepSeek R1 1.5B Model β”‚ β”‚ β”‚ β”‚ (Distill-Qwen-1.5B Base) β”‚ β”‚ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ 

βš™οΈ Configuration

Environment Variables

# Core Configuration WEBCHECK_VERSION=2.1.0 STORAGE_TYPE=in-memory PORT=3000 # LLM Configuration OLLAMA_MODEL=deepseek-r1:1.5b OLLAMA_CONTEXT_LENGTH=8192 OLLAMA_BASE_URL=http://ollama:11434 # Security Configuration API_ENABLE_RATE_LIMIT=true API_TIMEOUT_LIMIT=120000

Advanced Configuration

# docker-compose.override.yml services: web-check: environment: - CACHE_MAX_SIZE=100 - CACHE_MAX_AGE=21600 - ANALYSIS_TIMEOUT=180 deploy: resources: limits: memory: 4G cpus: '2.0'

πŸ“– API Documentation

Core Endpoints

# Health check GET /api/status # Security analysis GET /api?url=https://example.com # AI risk assessment POST /api/llm-insights { "url": "https://example.com", "scanResults": { ... } } # Analysis history GET /api/analysis-history

Interactive API Explorer

Access the full API documentation at: http://localhost:3000/web-check-api/spec

πŸ”§ Advanced Usage

Custom Analysis Workflows

# Batch security assessment curl -X POST http://localhost:3000/api/batch-analysis \ -H "Content-Type: application/json" \ -d '{"urls": ["site1.com", "site2.com"]}' # Export analysis results curl http://localhost:3000/api/analysis-history?format=json > results.json

Integration Examples

# Python integration import requests response = requests.get('http://localhost:3000/api', params={'url': 'https://example.com'}) analysis = response.json()

πŸ› Troubleshooting

Common Issues

# Check service status docker-compose ps # View logs docker-compose logs -f web-check # Test LLM connectivity curl http://localhost:11434/api/tags # Restart services docker-compose restart

Performance Optimization

# Monitor resource usage docker stats # Optimize for low memory export OLLAMA_CONTEXT_LENGTH=4096 docker-compose restart ollama

πŸ“š Documentation

🀝 Contributing

We welcome contributions to enhance Web-Check's security analysis capabilities:

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/amazing-security-check)
  3. Commit your changes (git commit -m 'Add amazing security analysis')
  4. Push to the branch (git push origin feature/amazing-security-check)
  5. Open a Pull Request

Development Setup

# Clone and setup development environment git clone https://github.com/ionsec/web-check.git cd web-check # Install dependencies npm install # Start development server npm run dev

πŸ›‘οΈ Security

Responsible Disclosure

If you discover security vulnerabilities, please report them to:

Security Features

  • πŸ”’ Non-root containers: Enhanced container security
  • πŸ›‘οΈ Input validation: Comprehensive input sanitization
  • πŸ” Rate limiting: API abuse protection
  • πŸ“ Audit logging: Comprehensive security event logging

πŸ“„ License & Attribution

πŸ† Credits & Acknowledgments

🌟 Original Creator:

πŸš€ Enhanced by IONSEC Dev Team:

  • Architecture Redesign: MongoDB removal and in-memory storage implementation
  • AI Integration: DeepSeek R1 1.5B model integration for security analysis
  • Performance Optimization: 50% faster startup, 40% memory reduction
  • Security Hardening: Production-ready deployment and container security
  • Contact: dev@ionsec.io

πŸ“œ License

MIT License Original Work: Copyright (c) Alicia Sykes <alicia@omg.lol> Enhanced Version: Copyright (c) IONSEC Dev Team <dev@ionsec.io> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. 

πŸ™ Special Thanks

  • Ollama Team - For the excellent LLM framework
  • DeepSeek AI - For the high-performance DeepSeek R1 model
  • Open Source Community - For continuous support and contributions

πŸš€ Ready to Get Started?

# One command to rule them all docker-compose up -d && open http://localhost:3000

🎯 Experience next-generation security analysis with AI-powered insights!


Enhanced by IONSEC Dev Team
Making cybersecurity analysis faster, smarter, and more accessible

Originally created by Alicia Sykes
Building the foundation for comprehensive web security analysis

GitHub Stars Follow IONSEC Follow Original Author

About

πŸ•΅οΈβ€β™‚οΈ All-in-one OSINT tool for analysing any website

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • TypeScript 61.1%
  • JavaScript 21.5%
  • Astro 9.4%
  • Shell 4.2%
  • SCSS 1.7%
  • HTML 0.9%
  • Other 1.2%