Web auditor

Problem

A web security review needs repeatable steps, a scope agreed in advance and a report that someone else can read and check.

Solution

• I built a Python CLI that uses only the standard library.
• It requires an authorized scope before any audit runs.
• It generates reports in JSON and HTML.
• It detects cloaking by User-Agent, meaning sites that serve different content depending on the browser that visits them.

Outcome

I used it to document a phishing site impersonating a courier company: it detected that the site served different content depending on the device.