OWASP Live Detector

Live frontend security analysis for OWASP-aligned misconfigurations using runtime headers, DOM, and network signals.

OWASP Live Detector is a developer-focused Chrome extension that performs live, frontend security analysis directly in the browser. The extension inspects runtime HTTP response headers, DOM structure, and network behavior to identify OWASP Top 10–aligned misconfigurations and client-side security risk signals such as: • Missing or unsafe Content Security Policy (CSP) • Clickjacking exposure • Mixed content • Insecure form handling • Token leakage in URLs • Heuristic DOM-based XSS patterns All analysis is performed locally within the browser. No data is collected, stored, or transmitted externally. This is an independent, OWASP-aligned tool and is not affiliated with or endorsed by OWASP.