Walter White

WebMask: 43+ OWASP-aligned website checks with a React UI

I wanted a vulnerability scanner I could run myself — not a black-box SaaS — so I built WebMask.

What you get

  • 43+ checks aligned with common OWASP-style findings
  • React admin UI for running scans and reading severity-rated results
  • SSRF-safe design considerations in the architecture
  • Node / Express / Vite stack

Who it's for

Developers who want a readable, hackable scanner for portfolio and practical AppSec learning — not a replacement for a full commercial DAST suite.

git clone https://github.com/mamyan2001-gif/webmask.git
cd webmask
# see README for setup

Enter fullscreen mode Exit fullscreen mode

I'm a full-stack + AppSec-minded developer in Yerevan, looking for remote roles. Also shipping Seal, Hookbox, and Sentinel.

GitHub: mamyan2001-gif/webmask