Security Audit (DNS+SSL+redirects)

action_security_audit · action · Utility · Available · v1.0.0

Description

Read-only security-posture auditor for a web domain: a battery of deterministic checks across DNS, TLS certificates, security headers and redirect hygiene per CIS/OWASP best practices, returning a normalised 0-100 score with prioritised findings.

⚙️ Configuration parameters

Fields shown in the editor when configuring the node. Generated directly from the NodeDefconfigFields.

FieldTypeRequiredDefaultDescription
domain
Dominio
expressionyes
esempio.it o {{input.domain}}
Dominio da auditare (senza https://). Supporta expression {{ }} per dinamica.
dkimSelectors
Selettori DKIM (CSV)
stringnogoogle,default,selector1,selector2,k1,mail,smtpSelettori DKIM da provare (lookup TXT <selector>._domainkey.<domain>). Vuoto = skip DKIM check.
checkSsl
Verifica SSL certificate
booleannotrueConnetti TLS port 443 → estrai issuer, notAfter, SAN. Warning se expiry <30 giorni.
checkRedirects
Verifica redirect chain
booleannotrueSegui HEAD http://<domain> → max 10 hop. Detect open-redirect (host mismatch).
timeoutMs
Timeout per check (ms)
numberno5000Timeout per ogni DNS/TLS/HTTP check. Min 1000, max 30000. Default 5s.

💡 Configuration example

JSON snippet of the node as it appears in the workflow. Values are derived fromdefaultValue and from required parameters.

{
  "id": "node-action_security_audit-1",
  "defId": "action_security_audit",
  "label": "Security Audit (DNS+SSL+redirects)",
  "config": {
    "domain": "esempio.it o {{input.domain}}",
    "dkimSelectors": "google,default,selector1,selector2,k1,mail,smtp",
    "checkSsl": true,
    "checkRedirects": true,
    "timeoutMs": 5000
  }
}

🔗 Related nodes in the same category

Ready to use Security Audit (DNS+SSL+redirects)?

Available now on all FlowForge plans. Try it free without a credit card.

Start freeBrowse all nodes