Web-Check logo

Web-Check

Website

All-in-one OSINT tool for analyzing any website.

34.3k stars 2.8k forks last commit first released MIT

Actively maintained

Last commit 26 Jul 2026.

Web-Check screenshot

Web-Check is an open source OSINT tool designed to analyze any website and reveal its underlying architecture, security posture, and technology footprint. It aggregates data such as IP information, SSL chain details, DNS records, cookies, response headers, domain information, crawl rules, site map, server location, redirects, open ports, traceroute results, DNSSEC status, site performance, trackers, related hostnames, and even carbon footprint metrics.

Key Features

  • IP info and network layout
  • SSL chain and certificate details
  • DNS records and domain information
  • Cookies and response headers analysis
  • Crawl rules and site map visibility
  • Server location and redirects ledger
  • Open ports and traceroute data
  • DNSSEC presence and related security data
  • Site performance metrics and trackers
  • Related hostnames and asset discovery
  • Carbon footprint estimation

Use Cases

  • OSINT reconnaissance for security teams and threat intel
  • Web security assessments and architecture discovery for devops and security engineers
  • Performance and infrastructure analysis to optimize websites

Limitations and Considerations

  • There is a known security advisory affecting the project’s screenshot API (command injection via unvalidated URL). Users should ensure they are on a patched release and follow secure deployment practices.

Conclusion

  • Web-Check is an open source, self-hostable OSINT solution that helps you understand a website’s internals and security posture. It supports multiple deployment options (Docker, Netlify, Vercel) and offers a hosted live demo for quick evaluation.

Categories:

Tags:

Tech Stack:

Share:

Similar to Web-Check

Papermark logo

Papermark

Document sharing and virtual data rooms with analytics

8.8k
1.3k
Last commit

Open-source DocSend alternative for secure document sharing and data rooms, with custom domains, access controls, and viewing analytics.

Actively maintained
Alternative to:
DocSend logo
DocSend
+7
Parseable logo

Parseable

An observability platform for predictive insights across MELT telemetry.

2.4k
167
Last commit

Parseable ingests, analyzes, and extracts insights from MELT telemetry data with predictive analytics and a unified SQL/NL querying interface.

AGPL-3.0Actively maintained
Alternative to:
Datadog logo
Datadog
+15
Tracearr logo

Tracearr

Real-time monitoring and analytics for Plex, Jellyfin, and Emby

2.1k
72
Last commit

Real-time monitoring platform for Plex, Jellyfin, and Emby with session tracking, playback analytics, stream maps, alerts, and account-sharing detection rules.

Actively maintained
Alternative to:
Tautulli logo
Tautulli
+1
tirreno logo

tirreno

Security analytics framework for in-app threat detection and risk

1.5k
176
Last commit

Open-source security analytics framework for event tracking, in-app threat detection, and risk management to protect applications from abuse, bots, and account takeover.

AGPL-3.0Actively maintained
Alternative to:
Splunk logo
Splunk
+4

Nimtable

Observability and control plane for Apache Iceberg catalogs

468
31
Last commit

Lightweight web UI and REST control plane for exploring, inspecting, and managing Apache Iceberg catalogs and tables with Docker deployment and engine integrations.

Apache-2.0Slowing down
Alternative to:
Amazon OpenSearch Service logo
Amazon OpenSearch Service
+4
Swetrix logo

Swetrix

Cookie-less open-source web analytics and performance monitoring

1.1k
63
Last commit

Privacy-first, cookie-less open-source web analytics with session analysis, real-user performance monitoring, error tracking and feature flags. Self-hostable or available as managed cloud.

AGPL-3.0Actively maintained
Alternative to:
Google Analytics logo
Google Analytics
+19