offense

Offensive security tool for developers: automated safety-first checks and CI-ready reports.

Features

• Automated checks for OWASP Top 10 issues and common misconfigurations
• Safe, non-destructive exploit simulations and validation tests
• CI-friendly JSON and HTML reports with actionable remediation guidance
• Programmatic API and CLI with configurable profiles, rate limits, and scopes

Install

npm install offense

Quick Start

CLI:

npx offense scan --url http://localhost:3000 --profile safe-default

Programmatic:

const offense = require('offense');

(async () => {
  const result = await offense.scan({
    url: 'http://localhost:3000',
    profile: 'safe-default',
    nonDestructive: true
  });

  console.log(result.summary);
})();

License

MIT