fce90f458c
Implements the full site health auditor with four check groups: - SSL/TLS (certificate validity, expiry, chain, TLS version, ciphers) - HTTP (redirect chain, security headers, response time) - DNS (A/AAAA, MX, SPF, DKIM, DMARC, DNSSEC) - Infrastructure (CDN detection, common port probes) Includes CLI with --checks filter, --json and --out flags, cross-compile Makefile, and GitLab CI pipeline. Signed-off-by: Blake Ridgway <blake@blakeridgway.com>
98 lines
2.7 KiB
Markdown
98 lines
2.7 KiB
Markdown
# arcline-audit
|
|
|
|
One-command site health auditor. Checks SSL, HTTP security headers, DNS records, redirect chains, and basic infrastructure info for any domain.
|
|
|
|
Useful for onboarding new clients and producing a quick written report before an engagement starts.
|
|
|
|
## Stack
|
|
|
|
- Go — single static binary, no runtime dependencies
|
|
- Standard library only — zero external dependencies
|
|
|
|
## Usage
|
|
|
|
```sh
|
|
# Full audit (all checks)
|
|
arcline-audit example.com
|
|
|
|
# Run specific checks
|
|
arcline-audit example.com --checks ssl,dns
|
|
|
|
# JSON output
|
|
arcline-audit example.com --json
|
|
|
|
# Write to file
|
|
arcline-audit example.com --out report.txt
|
|
```
|
|
|
|
### Flags
|
|
|
|
| Flag | Description |
|
|
|---|---|
|
|
| `--checks` | Comma-separated check groups: `ssl`, `http`, `dns`, `infra` (default: `all`) |
|
|
| `--json` | Output as JSON instead of terminal format |
|
|
| `--out` | Write report to a file instead of stdout |
|
|
|
|
## Checks
|
|
|
|
| Group | What it checks |
|
|
|---|---|
|
|
| SSL/TLS | Certificate validity, expiry, chain completeness, TLS version, cipher suite warnings |
|
|
| HTTP | Redirect chain (http→https), security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy), Server header disclosure, response time |
|
|
| DNS | A/AAAA records, MX records, SPF, DKIM, DMARC, DNSSEC detection |
|
|
| Infrastructure | CDN detection, common port probes (80, 443, 22, 3306, 5432) |
|
|
|
|
## Example output
|
|
|
|
```
|
|
$ arcline-audit example.com
|
|
|
|
── SSL ────────────────────────────────────────────────
|
|
[OK] valid certificate (2026-08-29)
|
|
[OK] not self-signed
|
|
[OK] certificate chain is complete
|
|
[OK] TLS 1.3
|
|
[OK] cipher suite: TLS_AES_128_GCM_SHA256
|
|
|
|
── HTTP ───────────────────────────────────────────────
|
|
[WARN] no HSTS header
|
|
[WARN] Server header disclosed: cloudflare
|
|
[OK] response time 34ms
|
|
|
|
── DNS ────────────────────────────────────────────────
|
|
[OK] A record: 104.20.23.154
|
|
[OK] MX records present (1)
|
|
[OK] SPF record found
|
|
[WARN] no DMARC record
|
|
|
|
── Infrastructure ─────────────────────────────────────
|
|
[OK] CDN detected: Cloudflare
|
|
```
|
|
|
|
## Build
|
|
|
|
```sh
|
|
# Local build
|
|
make build
|
|
|
|
# Cross-compile for all platforms
|
|
make release
|
|
```
|
|
|
|
This produces:
|
|
|
|
- `arcline-audit-linux-amd64`
|
|
- `arcline-audit-darwin-amd64`
|
|
- `arcline-audit-windows-amd64.exe`
|
|
|
|
## Install
|
|
|
|
```sh
|
|
sudo cp arcline-audit-linux-amd64 /usr/local/bin/arcline-audit
|
|
sudo chmod 0755 /usr/local/bin/arcline-audit
|
|
```
|
|
|
|
## License
|
|
|
|
MIT — see [LICENSE](LICENSE).
|