I built the Security Test Framework because security testing is usually too complex, too expensive, or gets left until it’s too late. I wanted something lightweight and developer-friendly.

With npx security-test auto, the tool auto-detects your project (React, NestJS, Express, etc.), runs 16 categories of security checks (XSS, SQL injection, CSRF, authentication, headers, dependency vulnerabilities, and more), and generates clear HTML/JSON/text reports.

It’s open-source (MIT) and works out of the box — no config required. GitHub: https://github.com/yourname/security-test-framework pm: https://www.npmjs.com/package/security-test-framework

I’d love feedback from the HN community — especially what checks or CI/CD integrations you’d like to see next.