Web Check on Ubuntu 24.04 LTS

Azure Security

Web Check, a self hosted OSINT dashboard that reports what is publicly observable about any website.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Web Check is an open source website analysis and OSINT dashboard. You enter a URL and it gathers what is publicly observable about that site into a single report of around thirty five cards: DNS and TXT records, SSL and TLS certificate detail, HTTP security headers, HSTS, open ports, DNSSEC, redirect chains, cookies, detected technology stack, WHOIS and registration data, mail configuration, crawl rules, social tags and an estimated carbon footprint. It suits reviewing the exposure of your own estate, assessing a supplier or partner domain, and investigating an unfamiliar site quickly without stitching together a dozen separate lookup tools.

Why the cloudimg image

cloudimg delivers Web Check hardened, fully patched and secure by default. The application ships with no login of its own and its analysis endpoint will fetch arbitrary addresses on a requester's behalf, so cloudimg places the whole dashboard and its API behind a login at the web server and generates a unique password on the first boot of every instance, written to a root only file. The analysis server is bound to the loopback interface, is blocked from reaching cloud instance metadata and private network ranges, and is rate limited by default. A pinned headless browser is installed so the screenshot and quality checks work immediately, and no third party API key is ever baked into the image. The base is kept current with unattended security upgrades, every deployment is paired with a step by step guide, and it is backed by 24/7 cloudimg support.

Common uses

  • Audit the DNS, certificate and security header posture of a domain you own
  • Assess the public exposure of a supplier or partner website before onboarding
  • Investigate an unfamiliar domain from a single consolidated report

See it running

Real screenshots taken while testing this image against its deployment guide.

Web Check on Ubuntu 24.04 LTS screenshot 1 Web Check on Ubuntu 24.04 LTS screenshot 2 Web Check on Ubuntu 24.04 LTS screenshot 3 Web Check on Ubuntu 24.04 LTS screenshot 4