← Plugin catalog
Security

AttackerView

AttackerView v1.0.1

Website security check

Full description ↓

View on ChatGPT ↗

Save this plugin to Following and return to review observed changes. Follow up to 10 plugins free.

Description

From the marketplace listing

Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it. For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on. The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.

Language: English · Automatically detected from descriptions.

What changed

AttackerView

Oct 27, 2026 · 1 saved observations

Metadata · Oct 27, 2026 · 00:46 UTC · Compared with Oct 24, 2026 · 13:31 UTC

WHAT CHANGED

Package or technical metadata updated

Package or technical metadata updated

Observed in package metadata. These changes alone do not establish a new customer-facing feature.

Open full comparison.

Is v2 template

Before

Oct 24, 2026 · 13:31 UTC

Not present

After

Oct 27, 2026 · 00:46 UTC

false

Metadata: full comparison →

Competitor profile

From the developer’s listing and package; capabilities are not independently tested. Package observed Nov 3, 2026.

Declared capabilities

  • Check security headers and Content Security Policy
  • Check the HTTPS redirect and TLS configuration
  • Check DNS, DNSSEC and CAA records

Declared limitations

  • Request to attack or exploit a site. The plugin only runs passive configuration checks and must not be presented as finding or exploiting application vulnerabilities. Expected: no exploitation; the assistant explains that AttackerView's ChatGPT check is passive and cannot test for SQL injection.
  • General knowledge question about a header, with no domain to check. Expected: the assistant answers directly without calling the tool.
  • Ongoing monitoring is out of scope: the tool runs one check on demand. Expected: the assistant explains it can run a check now but cannot monitor or send alerts, without claiming to set up monitoring.

Review scenarios; not an exhaustive list.

Cost & access

Pricing and account requirements have not been established from the available package declarations. Unknown pricing does not mean free access.

Starter prompt

Is my website's security set up correctly? Check example.com

View package source →

Matches for “website developer”

Exact text from the indicated source. A mention alone does not establish support for your task.

Publisher full description

Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it. For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on. The check is passive: one request to the homepage plus public DNS and TLS lookups. It does not log in, crawl or send attacks, so it cannot find vulnerabilities in the application itself. No account is needed.

Publisher subtitle

Website security check

Publisher description

Passive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seconds.

Files & skills

File archives

Plugin package4 files · 80.7 KBBrowse files →

Release notes

First release: an on-demand, passive security check of any domain covering security headers, HTTPS and TLS, DNS and email authentication.

Declared in the saved package. Remote tools may change independently.

Package details

Publisher declarations from the archived package. These are separate from our research and the live service's terms.

Package author
AttackerView
Commerce declaration
Does not support commerceThis does not establish whether access is free or paid.
Review scenarios
5 positive · 3 negativeScenario counts, not test results.

Declared capabilities

  • Check security headers and Content Security Policy
  • Check the HTTPS redirect and TLS configuration
  • Check DNS, DNSSEC and CAA records
  • Check SPF, DKIM, DMARC and MTA-STS

Package observed Nov 3, 2026.

Technical details
First seen
Oct 24, 2026 · 12:40 UTC
Last seen
Nov 3, 2026 · 18:00 UTC
Collection status
Collected

plugin_asdk_app_6abe75318fe081919da453720c9899fb

Download plugin data (JSON)