NetForge

NetForge is a free Firefox extension designed to provide real-time security analysis for any website directly within the browser. It enables users to assess the security configuration of visited sites without requiring an account or collecting any user data.

The extension examines several key aspects of web security. It checks whether a site's connection uses HTTPS and TLS, immediately alerting users if only an unencrypted HTTP connection is present. NetForge analyzes nine critical security headers, including HSTS, CSP, X-Frame-Options, Permissions-Policy, and Referrer-Policy, among others, to evaluate the robustness of a site's security settings. The tool also displays the actual server IP address behind the domain and allows users to copy it with a single click.

NetForge detects mixed content vulnerabilities by identifying if HTTP resources are loaded on HTTPS pages, which can compromise encryption. It also finds insecure forms that transmit data over HTTP, highlighting potential exposures of credentials or sensitive input. Additionally, the extension lists third-party script domains loaded by the page, helping users identify possible supply chain risks.

For each page analyzed, NetForge assigns a security score from 0 to 100 based on the results of its checks, offering a quick overview of how well a site is configured from a security perspective. The extension is available for Firefox, is free of charge, requires no user registration, and does not track user activity. Its comprehensive toolkit is aimed at users interested in evaluating and understanding website security in a straightforward, privacy-respecting way.