Stargazer is our defensive audit engine. It checks SSL certificates, security headers, SPF and DMARC, cookies, server technology, latency and SEO in real time, then rates your readiness against PCI-DSS, OWASP and NIST.
Sample report
Any public site you're responsible for. No sign-up, nothing to install.
TLS, headers, DNS and email auth, cookies, fingerprints and page basics, checked live.
A posture index from 0 to 100, findings by severity, and a fix guide for each one.
Where a fix is configuration, Stargazer gives you the snippet to paste.
Each module scores out of 100 and lists its findings with a severity and a fix. Together they make the posture index at the top of the report.
Certificate subject and issuer, days to expiry, protocol version and cipher suites.
HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
SPF policy and DMARC enforcement, so nobody can send mail as your domain.
Secure, HttpOnly and SameSite on every cookie the site sets.
Server banner, frameworks and libraries it can identify, cross-referenced against known vulnerabilities.
Server latency, compression, title and the basics search engines look for.
Sample run
Stargazer maps what it finds to specific controls, so you can see where you stand before an assessor does. It's a readiness signal, not a certification.
Transport security and header rules for pages that handle payments.
Default settings, missing hardening and over-shared server details.
Protocol versions and cipher suites against NIST's cryptographic recommendations.
Every finding has a fix guide. When the fix is configuration, Stargazer writes it for you: this is the snippet for the sample report's one low-severity finding, a missing Permissions-Policy header.
// next.config.mjs
async headers() {
return [{
source: "/(.*)",
headers: [
{
key: "Permissions-Policy",
value: "camera=(), microphone=(), geolocation=()",
},
],
}];
}Run Stargazer on your site now. If the report raises questions, send it to us and an engineer will walk you through it.