I Built a Security Scanner in C That Grades Any Website A-F — Here's How

You paste a domain. Ten seconds later you get a single grade — A through F — covering 11 security checks. No signup. No API key. Just a URL. Try it right now → contrastcyber.com Why I Built This Every security scanner I found was either: Enterprise SaaS with a sales call A CLI tool that dumps 200 lines of raw output Free but limited to SSL-only I wanted something that gives a single, opinionated score — like a credit score for your server's security posture. Something a developer can run in 10 seconds and immediately know where they stand. So I wrote one from scratch. In C. The Scanner: 2,300 Lines of C The core scanner is a single C binary. No frameworks, no runtime dependencies beyond libcurl , openssl , libresolv , and cJSON . It runs 11 checks and scores them out of 100: Module Points What It Checks Security Headers 25 CSP, HSTS, X-Frame-Options, X-Content-Type, Referrer-Policy, Permissions-Policy SSL/TLS 20 Protocol version, cipher strength, certificate validity DNS Security 15 SP