Security scanner
for indie developers.

$ marshell scan yoursite.com

>>> Starting security scan...

>>> Checking open ports... ✓ done

>>> Checking SSL/TLS config... ✗ weak cipher detected

>>> Checking security headers... ✗ missing HSTS, CSP

>>> Checking exposed paths... ✓ clean

>>> Checking DNS config... ✓ clean

>>> Checking fingerprinting... ✗ nginx version exposed

SCAN COMPLETE — 3 issues found

Severity Issue Fix

HIGH Missing HSTS header add to next.config.js → headers()

MEDIUM Weak TLS cipher (RC4) add to middleware.ts → setHeader()

LOW Server version exposed set in vercel.json → headers[]

─────────────────────────────

FIX WITH AI

─────────────────────────────

Paste into Claude Code or Cursor:

Fix these security issues in my Next.js app on Vercel:

1. [HIGH] Missing HSTS header — add to next.config.js headers()

2. [MEDIUM] Weak TLS cipher — update vercel.json

3. [LOW] Server version exposed — strip in middleware.ts

Show me every file to change. Don't explain, just fix.

marshell@scan:~$ _