Web Check, a self hosted OSINT dashboard that reports what is publicly observable about any website.
Web Check is an open source website analysis and OSINT dashboard. You enter a URL and it gathers what is publicly observable about that site into a single report of around thirty five cards: DNS and TXT records, SSL and TLS certificate detail, HTTP security headers, HSTS, open ports, DNSSEC, redirect chains, cookies, detected technology stack, WHOIS and registration data, mail configuration, crawl rules, social tags and an estimated carbon footprint. It suits reviewing the exposure of your own estate, assessing a supplier or partner domain, and investigating an unfamiliar site quickly without stitching together a dozen separate lookup tools.
cloudimg delivers Web Check hardened, fully patched and secure by default. The application ships with no login of its own and its analysis endpoint will fetch arbitrary addresses on a requester's behalf, so cloudimg places the whole dashboard and its API behind a login at the web server and generates a unique password on the first boot of every instance, written to a root only file. The analysis server is bound to the loopback interface, is blocked from reaching cloud instance metadata and private network ranges, and is rate limited by default. A pinned headless browser is installed so the screenshot and quality checks work immediately, and no third party API key is ever baked into the image. The base is kept current with unattended security upgrades, every deployment is paired with a step by step guide, and it is backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.