Thank you so much for taking the time to review the code and pointing these out! I really appreciate it. To clarify: SiteIQ is designed to run locally on your own machine (localhost:5000) as a personal security testing tool - similar to how you'd run Burp Suite or OWASP ZAP locally. It's not meant to be deployed as a public-facing web service. That said, your points are absolutely valid and I'll definitely work on fixing these. This is my first open source project, so feedback like this helps me learn a lot. Thanks again!