Scans for insecure connections (non-HTTPS) Detects mixed content (HTTP resources on HTTPS pages) Identifies outdated JavaScript libraries (e.g., jQuery) Checks for potential open redirects Scans for potential XSS vulnerabilities in text inputs Verifies the presence of important security headers (CSP and X-Frame-Options)
