WebGuard AI
Coverage

Assessment coverage at a glance

WebGuard AI runs 81 automated security controls across 15 domains — every one produces a real, evidence-based result with a reason. The full per-control breakdown is included in the PDF assessment report emailed to you.

53
Passive
Runs on every scan (incl. free Quick)
24
Safe active
Runs on Standard & Comprehensive
4
Authenticated
Runs when test credentials are supplied

What runs in each tier

Quick · Free

53 passive controls

Standard / Comprehensive

77 controls (passive + safe active)

Authenticated

81 controls (adds session checks)

Domains assessed

A. General website and external security assessment13
B. OWASP Top 10 and common web application vulnerabilities5
C. Authentication and session management7
D. Authorization and access control1
E. API security5
F. HTTP security headers and transport17
G. Sensitive files and information disclosure11
H. Database security2
I. JavaScript, Node.js, and frontend frameworks4
J. WordPress8
K. DNS, email, and domain security5
L. Server and operating-system security2
M. Cloud, CI/CD, and software supply chain1

Mapped to OWASP ASVS 5.0.0

WebGuard AI maps its automated controls to the 345 requirements of the OWASP Application Security Verification Standard 5.0.0. We only mark a requirement as automatically verified when a scan produces real evidence for it — ASVS itself notes that automated, black-box testing cannot verify most requirements. The rest are surfaced honestly as needing credentialed, documentation, or manual review, so your coverage picture is never inflated.

24
Automated
22
Partial / indicative
126
Needs credentials
31
Documentation review
142
Manual review

46 of 345 ASVS requirements are assessed directly by the scanner (automated + indicative); authenticated scans and manual review extend coverage further. Not a certification of ASVS compliance.

Want the full control-by-control results, evidence, and remediation? Run an assessment and receive the detailed PDF report by email.

Start a scan