Hacker News Reader

You can scan for a huge chunk of this with https://www.tinfoilsecurity.com, and we're adding more every day. Most importantly, you should make it a regular part of your Dev cycle.

Note: this isn't an ad, it just seemed relevant to those interested in a "cheat sheet." Automating it by calling out to our API seems really relevant. :)

View on HN

The problem with your approach is that you are assuming that people are fine that scan for in production for security issues. While it is true that everyone does it, this arguments falls flat because there are plenty of systems which will avoid the risk and for good reasons.

Nope, in fact you can scan in staging or Dev too, by using Bifrost: https://www.tinfoilsecurity.com/developer/bifrost

Not a big fan of being forced to sign up to see the results of the free test.

I really really wish this didn't have to be the case. Legally, in order for us to show you results, we have to verify you have authorization / own the site. Part of doing that is to make you register. If we could show results without making you register and verify, we would, but we'd be on very very shaky legal ground if we did, for obvious reasons.

Reply on news.ycombinator.com