Security & privacy
Security Self-Check: Turning 'Probably Fine' into a Verifiable Checklist
Inventory assets and reduce exposure before scanning. Scanning without a checklist produces alerts you cannot rank.
Security self-check runs: know what you have, know what is exposed, know which versions have known issues, then decide what to fix. This list follows that order, avoiding buying a scanner before knowing what to scan.
Shortlist（7）
- personal-security-checklist · 深度导读卡 ¥2.9NOASSERTION · TypeScript · ★22.7k
A checkable checklist first, so later tools have somewhere to land.
- awesome-privacy · 项目速写 ¥2.9CC0-1.0 · TypeScript · ★20.2k
A cross-cutting reference on privacy and account security to surface exposure you did not consider.
- nuclei · 深度导读卡 ¥2.9MIT · Go · ★32.6k
Template-driven vulnerability scanning for regression checks on assets you are authorized to test.
- SafeLine · 深度导读卡 ¥2.9GPL-3.0 · Go · ★23.2k
A WAF layer to reduce public entry points, blocking common automated attacks before deeper detection.
- caddy · 深度导读卡 ¥3.9Apache-2.0 · Go · ★78.7k
Automatic certificates and reverse proxying, removing 'forgot to renew' style exposure.
- dns-blocklists · 深度导读卡 ¥2.9GPL-3.0 · Text · ★28.2k
Egress blocklists to reduce the chance endpoints follow malicious domains.
- Ciphey · 深度导读卡 ¥2.9MIT · Rust · ★21.7k
Encoding and simple cipher identification for inspecting suspicious samples without executing them.
Write the authorization boundary first
Scan only assets you own or are authorized in writing to test. Record scope, window and contacts to avoid collateral impact.
Reduce exposure before deep detection
Closing unused ports, moving admin panels internal and centralizing certificates usually beats adding another detection system.
Alerts must be rankable
Rank by exploitability times asset importance and keep a handling record. Unranked scan output becomes a list nobody reads.
Common pitfalls
Common traps: treating a scanner as insurance, ignoring dependency vulnerabilities, scanning only externally, and deleting logs right after finding an issue.
Alternatives
With few assets, a manual checklist plus regular dependency upgrades may beat a scanning platform. Tools earn value through coverage and regression efficiency.