audit-metaltorque

CLI for MetalTorque Security Audit — scan any website for security vulnerabilities, headers, TLS issues, and more.

Install

npx audit-metaltorque scan example.com    # Run without installing
npm i -g audit-metaltorque                # Or install globally

Quick Start

# Quick passive scan (free, no account needed)
audit-mt scan example.com

# CI/CD gate: fail if score < 80
audit-mt check example.com --min 80

# Full audit with AI analysis (needs API key)
audit-mt auth YOUR_API_KEY
audit-mt full-scan example.com

Commands

Scanning

| Command | Description | |---------|-------------| | scan <url> | Quick passive security scan (free) | | full-scan <url> | Full audit: headers + TLS + endpoints + Nuclei + AI analysis | | check <url> | CI/CD pass/fail gate (--min 70 threshold) | | rescan <url> | Compare to previous scan (--previous <jobId>) |

Results

| Command | Description | |---------|-------------| | result <jobId> | View audit result | | pdf <jobId> | Download PDF report (--output, --executive) | | email <jobId> --to <email> | Email report to someone |

Domain Intelligence

| Command | Description | |---------|-------------| | history <domain> | Score history over time | | trend <domain> | Trend direction (improving/declining/stable) | | subdomains <domain> | Discover subdomains via Certificate Transparency | | verify <domain> | Domain ownership verification (DNS or file) |

Monitoring

| Command | Description | |---------|-------------| | monitor add <domain> | Add domain monitor (--interval 24) | | monitor remove <domain> | Remove monitor | | schedule add <url> | Schedule recurring rescans | | schedule list | List scheduled rescans |

Account

| Command | Description | |---------|-------------| | auth <api-key> | Save API key | | dashboard | Domain portfolio overview | | usage | API usage stats | | branding | White-label branding (Agency plan) | | webhook <url> | Configure notification webhook |

Agent / CI Usage

Every command supports --json:

# JSON output for scripting
audit-mt scan example.com --json | jq '.score'

# GitHub Actions
- name: Security Check
  run: |
    npx audit-metaltorque check ${{ env.URL }} --min 70
  env:
    AUDIT_MT_API_KEY: ${{ secrets.AUDIT_KEY }}

# Use in shell scripts
RESULT=$(audit-mt check example.com --min 70 --json)
SCORE=$(echo $RESULT | jq '.score')

Environment Variables

| Variable | Description | |----------|-------------| | AUDIT_MT_API_KEY | API key (overrides saved config) | | AUDIT_MT_URL | Server URL (default: https://audit.metaltorque.dev) | | NO_COLOR | Disable colored output |

Pricing

| Plan | Price | Full Scans/Mo | Monitors | API Checks/Day | |------|-------|---------------|----------|----------------| | Free | $0 | 0 | 0 | 5 | | Single | $19 | 1 | 0 | — | | Starter | $29/mo | 10 | 3 | 20 | | Pro | $79/mo | 50 | 10 | 50 | | Agency | $149/mo | 200 | 25 | 100 |