ONE SECURE is a Python-based SOC web security scanner that automatically analyzes a website and identifies common security weaknesses. The project starts when the user enters a website URL into the web dashboard. The perform_security_audit() function acts as the main controller of the project by processing the URL, resolving the hostname and IP address, sending an HTTP request, collecting response headers and cookies, and coordinating all security checks. The scanner then performs SSL/TLS analysis to check the certificate, issuer, expiration date, TLS version, and cipher information. It also checks important HTTP security headers such as Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, and Referrer-Policy.
The project also analyzes cookies to identify missing security attributes such as HttpOnly and Secure, and checks HTTP response headers for information disclosure through fields such as Server and X-Powered-By. Another important function, probe_ports(), scans 500 TCP ports using parallel processing to identify open services and classify their security risk as Low, Medium, High, or Critical. It recognizes services such as FTP, Telnet, HTTP, SMB, MySQL, RDP, PostgreSQL, VNC, Redis, and MongoDB.
The scanner also performs DNS security analysis by checking SPF and DMARC records, which help protect domains against email spoofing. After completing all checks, the vulnerability engine creates detailed findings containing the vulnerability title, severity, description, impact, and recommended remediation. The system starts with a security score of 100 and deducts points according to the detected weaknesses. The final score is classified into security levels such as SECURE, MEDIUM RISK, or NOT SECURE.
On the frontend, the triggerAuditScan() function sends the website URL to the Python backend and displays the scanning progress through a terminal-style interface. The renderScanResults() function receives the completed JSON report and displays the security score, vulnerabilities, headers, ports, SSL information, DNS results, and audit logs on the dashboard. The project also provides scan history, allowing previous results to be loaded or cleared, and includes a built-in threat database containing malware and web-attack information such as viruses, worms, Trojans, ransomware, SQL injection, and XSS.
Finally, the downloadReport() function generates a detailed security audit report containing the target information, security score, vulnerabilities, HTTP headers, raw response headers, port results, SSL/TLS details, SPF/DMARC results, and execution logs. The project also supports dark/light themes, scan history, threat searching and filtering, live audit logs, responsive dashboard design, and a local Python web server. Overall, ONE SECURE combines multiple web-security checks into a single application that allows users to scan, analyze, understand, and document the security condition of a website.
