DeployPass

DeployPass is a website security scanner that performs 19 passive checks on publicly accessible websites. It examines security headers, CORS configuration, cookie flags, mixed content, frontend exposure, source maps, and other deployment-related security signals without requiring login credentials, running port scans, or attempting exploits.

The tool is designed for developers to use between completing development and shipping code. Users enter a public URL and receive a score, severity breakdown, and actionable explanations for findings. Results can be shared via private report links.

DeployPass includes both a full 19-check scan and individual focused checkers for security headers, HSTS, CSP, mixed content, CORS, and Permissions Policy. The tool works with modern deployment platforms including Vercel, Cloudflare, Netlify, Render, and GitHub Pages. It is currently free and requires no signup.