Files

Blake Ridgway fce90f458c add initial Go implementation of arcline-audit

Implements the full site health auditor with four check groups:

  - SSL/TLS (certificate validity, expiry, chain, TLS version, ciphers)

  - HTTP (redirect chain, security headers, response time)

  - DNS (A/AAAA, MX, SPF, DKIM, DMARC, DNSSEC)

  - Infrastructure (CDN detection, common port probes)

Includes CLI with --checks filter, --json and --out flags,

cross-compile Makefile, and GitLab CI pipeline.

Signed-off-by: Blake Ridgway <blake@blakeridgway.com>

2026-06-23 05:08:34 -05:00

2.7 KiB

Raw Blame History

arcline-audit

One-command site health auditor. Checks SSL, HTTP security headers, DNS records, redirect chains, and basic infrastructure info for any domain.

Useful for onboarding new clients and producing a quick written report before an engagement starts.

Stack

Go — single static binary, no runtime dependencies
Standard library only — zero external dependencies

Usage

# Full audit (all checks)
arcline-audit example.com

# Run specific checks
arcline-audit example.com --checks ssl,dns

# JSON output
arcline-audit example.com --json

# Write to file
arcline-audit example.com --out report.txt

Flags

Flag	Description
`--checks`	Comma-separated check groups: `ssl`, `http`, `dns`, `infra` (default: `all`)
`--json`	Output as JSON instead of terminal format
`--out`	Write report to a file instead of stdout

Checks

Group	What it checks
SSL/TLS	Certificate validity, expiry, chain completeness, TLS version, cipher suite warnings
HTTP	Redirect chain (http→https), security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), Server header disclosure, response time
DNS	A/AAAA records, MX records, SPF, DKIM, DMARC, DNSSEC detection
Infrastructure	CDN detection, common port probes (80, 443, 22, 3306, 5432)

Example output

$ arcline-audit example.com

  ── SSL ────────────────────────────────────────────────
  [OK]  valid certificate (2026-08-29)
  [OK]  not self-signed
  [OK]  certificate chain is complete
  [OK]  TLS 1.3
  [OK]  cipher suite: TLS_AES_128_GCM_SHA256

  ── HTTP ───────────────────────────────────────────────
  [WARN] no HSTS header
  [WARN] Server header disclosed: cloudflare
  [OK]  response time 34ms

  ── DNS ────────────────────────────────────────────────
  [OK]  A record: 104.20.23.154
  [OK]  MX records present (1)
  [OK]  SPF record found
  [WARN] no DMARC record

  ── Infrastructure ─────────────────────────────────────
  [OK]  CDN detected: Cloudflare

Build

# Local build
make build

# Cross-compile for all platforms
make release

This produces:

arcline-audit-linux-amd64
arcline-audit-darwin-amd64
arcline-audit-windows-amd64.exe

Install

sudo cp arcline-audit-linux-amd64 /usr/local/bin/arcline-audit
sudo chmod 0755 /usr/local/bin/arcline-audit

License

MIT — see LICENSE.

2.7 KiB Raw Blame History