# Neevsight — Free Passive OSINT & Website Security Intelligence Scanner

> Neevsight is an advanced, free, and open-source passive OSINT (Open Source Intelligence) website security scanner created by Harshit Sharma. It enables security analysts, developers, and DevOps engineers to perform 38+ real-time security audits on any domain or IP without sending intrusive exploit payloads.

## Key Capabilities & Security Modules

- **Unified SSE Real-Time Scanner**: Concurrent 6-worker backend pool streaming security telemetry via Server-Sent Events.
- **SSL/TLS & Cipher Suite Inspection**: Validates certificate chains, expiration alerts, TLS 1.3 support, and known vulnerability exposures (BEAST, POODLE, SWEET32, RC4).
- **Security Headers & CORS Policy**: Verifies HSTS (HTTP Strict Transport Security), Content-Security-Policy (CSP), X-Frame-Options, Referrer-Policy, and wildcard CORS policies.
- **DNS & Subdomain Enumeration**: Full record inspection (A, AAAA, MX, TXT, NS, SOA, DNSSEC) and Certificate Transparency (CT) log subdomain discovery.
- **Email Security Hardening**: Evaluates SPF, DKIM, DMARC, MTA-STS, and BIMI strength.
- **Threat Intelligence & Blocklists**: Queries Google Safe Browsing, PhishTank, AbuseIPDB, and 17 global DNS blocklists.
- **Infrastructure & Port Scanning**: Checks open network ports (21, 22, 80, 443, 3306, 5432, 27017), server header signatures, and datacenter geolocation.
- **1-Click Server Remediation Generator**: Automatically generates production-ready Nginx, Apache, Express.js, and Cloudflare security header fix configurations.
- **Explainable AI Security Reports**: Google Gemini AI synthesizes telemetry into actionable executive summaries.
- **ETSA Audit PDF & Export**: On-demand 11-page External Threat Surface Assessment PDF, CSV, and Markdown report export.

## Primary Target Use Cases & Keywords

- Best free website security scanner
- Free passive OSINT reconnaissance tool
- Online SSL certificate checker and TLS analyzer
- Security headers tester and HSTS validator
- Subdomain finder and domain attack surface scanner
- Open ports and web tech stack detector

## Author & Project Information

- **Founder & Lead Architect**: Harshit Sharma
- **Deployment URL**: https://neevsight.tech
- **GitHub Repository**: https://github.com/harshitsharma2024mtech/NeevSight
- **License**: 100% Free & Open Source