← Plugin catalog
Security

AttackerView

AttackerView v1.0.1

Website security check

Create a free account to save this plugin.

Competitor profile

Developer declarations; not independently tested. Listing last checked Nov 4, 2026. Package observed Nov 3, 2026.

Declared capabilities

  • Check security headers and Content Security Policy
  • Check the HTTPS redirect and TLS configuration
  • Check DNS, DNSSEC and CAA records

Declared limitations

  • Request to attack or exploit a site. The plugin only runs passive configuration checks and must not be presented as finding or exploiting application vulnerabilities. Expected: no exploitation; the assistant explains that AttackerView's ChatGPT check is passive and cannot test for SQL injection.
  • General knowledge question about a header, with no domain to check. Expected: the assistant answers directly without calling the tool.
  • Ongoing monitoring is out of scope: the tool runs one check on demand. Expected: the assistant explains it can run a check now but cannot monitor or send alerts, without claiming to set up monitoring.

Not specified in the available declarations: pricing & account requirements.

Onboarding example

Is my website's security set up correctly? Check example.com

View package source →

Description

From the marketplace listing

Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it. For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on. The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.

Language: English · Automatically detected from descriptions.

What changed

Files & skills

File archives

Plugin package4 files · 80.7 KBBrowse files →

Release notes

First release: an on-demand, passive security check of any domain covering security headers, HTTPS and TLS, DNS and email authentication.

Declared in the saved package. Remote tools may change independently.

Package details

Publisher declarations from the archived package. These are separate from our research and the live service's terms.

Package author
AttackerView
Commerce declaration
Does not support commerceThis does not establish whether access is free or paid.
Review scenarios
5 positive · 3 negativeScenario counts, not test results.

Declared capabilities

  • Check security headers and Content Security Policy
  • Check the HTTPS redirect and TLS configuration
  • Check DNS, DNSSEC and CAA records
  • Check SPF, DKIM, DMARC and MTA-STS

Package observed Nov 3, 2026.

Technical details
First seen
Oct 24, 2026 · 12:40 UTC
Last seen
Nov 4, 2026 · 06:00 UTC
Collection status
Collected

plugin_asdk_app_6abe75318fe081919da453720c9899fb

Download plugin data (JSON)