← Connectivity Scanner

Docs & how-to

What it checks

The scanner probes an endpoint from the server side and grades five categories: reachability (DNS, TCP, HTTP, redirect resolution), TLS (handshake, protocol version, hostname match, expiry window), performance (connect latency, time-to-first-byte, total), security headers (HSTS, CSP, nosniff, frame, referrer, Permissions-Policy), and hygiene (HTTP→HTTPS upgrade, version-banner leaks, unsafe CORS).

It never runs authenticated actions and refuses targets that resolve to private / internal addresses.

How scoring works

  • Each check is pass / warn / fail (skip when not applicable).
  • pass = 1, warn = 0.5, fail = 0 inside a weighted category average.
  • Category weights: Reachability 30%, TLS 26%, Headers 22%, Performance 12%, Hygiene 10%.
  • Overall grade uses the shared ARC Labs letter bands (A+ … F).

How to use it

  1. Paste a URL or hostname (e.g. https://api.example.com) and click Scan endpoint.
  2. Unlock the report with the one-time signup (same across ARC Labs tools).
  3. Read the category cards and prioritized recommendations; copy Markdown or download JSON.
  4. Only scan endpoints you own or are authorized to test.

CLI

npm run scan -- https://example.com
npm run scan -- example.com --json
npm run scan -- example.com --min-grade=B   # exit 1 if below B (CI gate)

API

POST /api/scan
Authorization: Bearer <access-token>
{ "target": "https://example.com" }