VulnRadar Website Scanner by VulnRadar

VulnRadar scans the page you're looking at without pasting a URL into anything. Click the toolbar icon, hit Scan, and get results from the same 700+ check engine as the vulnradar.dev web app: security headers, TLS and certificate issues, cookies, DNS and email records, exposed secrets, information disclosure, and more.

Connect your VulnRadar account with an API key (free tier available) and the extension becomes a thin client over your own scan history, nothing is stored separately. Quick and Deep modes mirror the web app's scan form. An optional on-page card can flag a host you've already scanned, or that hasn't been checked yet. Auto-scan modes (on page load, on tab focus, on URL change) are available but off by default.

The extension reads the current page's URL to run a scan and to check known-result status. It does not read page content, and nothing is sent anywhere except vulnradar.dev's own API.

Fully open source under GPL-3.0: github.com/VulnRadar/vulnradar.dev/tree/main/extension