SurfSec Intelligence

External Attack Surface Management

Enterprise-grade automated security intelligence platform. Built with Python and Streamlit, it helps digital agencies proactively identify vulnerabilities in their clients' web properties before attackers do.

Core Capabilities

▹SSL & Certificate Validation Tracking
▹Comprehensive Security Headers Assessment
▹Sensitive File Exposure Detection (.env, .git)
▹Intelligent Agency Portfolio Crawler
▹Automated Branded Outreach System
▹Professional HTML Security Reports
▹GDPR-Compliant Anonymous Telemetry

Python 3.11+

FastAPI

Supabase

Streamlit UI

ℹ️ This is a backend Python application and cannot be run directly in the browser. The source code is available in the repository.

Architecture Overview

1. Portfolio ScoutBeautifulSoup4

Crawls agency websites to discover client targets dynamically.

2. Security ScannerRequests + Core

Validates SSL, checks security headers, and finds exposed files.

3. Telemetry & DbSupabase

Stores GDPR-compliant anonymous risk scores for aggregate trends.

4. Actionable OutputJinja2 + SMTP

Generates HTML reports and drafting highly contextual outreach emails.

Status: Production Ready

Systems Online