PentestPro.ai Security Scanner

PentestProAI – Web Security Headers & Cookie Scanner 🔍 Instantly analyze web security configurations in your browser PentestProAI is a lightweight Chrome extension that helps developers and security professionals quickly inspect security headers, cookies, CORS settings, cache policies, and server information of any website — directly from the browser. Perfect for pentesters, developers, bug bounty hunters, and DevSecOps teams who need fast, reliable visibility without running heavy tools. 🛡️ Security Headers Analysis Checks the presence of critical security headers and clearly shows whether they are configured or missing: HSTS Content Security Policy (CSP) X-Frame-Options X-Content-Type-Options Referrer-Policy Permissions-Policy Each header is displayed as: ✓ Configured ✗ Missing 🍪 Cookie Security Inspection Lists all cookies for the current domain and highlights important security flags: Secure (HTTPS-only cookies) HttpOnly (not accessible via JavaScript) SameSite (CSRF protection) Quickly identify insecure or misconfigured cookies that may expose user data. 🌐 CORS Headers Visibility Displays raw CORS response headers without interpretation, allowing accurate manual analysis: access-control-allow-origin access-control-allow-credentials access-control-allow-methods access-control-allow-headers Ideal for detecting overly permissive or risky CORS configurations. 💾 Cache Control Headers Shows caching-related headers exactly as returned by the server: cache-control pragma expires Useful for identifying sensitive data being cached improperly. ℹ️ Technical Information Disclosure Reveals common technology disclosure headers, including: server (e.g. Nginx, Apache) x-powered-by (e.g. PHP, Express) x-aspnet-version Helps identify unnecessary information leakage that can aid attackers. 👨‍💻 Who is this extension for? Web developers Pentesters & security analysts Bug bounty hunters DevSecOps teams Anyone performing quick security checks on web applications ✅ Why use PentestProAI? No setup or configuration required Fast, browser-based security inspection Clear visibility into common web security misconfigurations Ideal for reconnaissance and quick audits 👉 Install now and inspect web security headers in seconds.