Building a security posture scanner with Next.js and Python

I wanted to learn cloud security the way it actually sticks: by building something real. So I built PostureGuard, a web application that scans a domain and returns a security posture report covering TLS, HTTP security headers and open ports, with a 0-100 score and an A-F grade. This post walks through the architecture and the decisions I found most interesting.

Update: Phase 1 is done. PostureGuard now runs on Azure Container Apps and is live at app.samdossou.com. The write-up is the next post in this series.

The shape of the system

PostureGuard has three moving parts:

A Next.js web app (App Router, TypeScript) where users sign up, add a domain, and request scans.

Building a security posture scanner with Next.js and Python

Related reading

Why I Built a Security Scanner That Never Touches the Target

We scanned 10 well-known sites with our security tool. Here's what we found.

I built a free cybersecurity scanner that gives any website a security score —…

I built a security scanner, never shipped it, and finally finished the job

I built a security layer for applications that developers can install in seconds

I Built a Four‑Cloud Security Scanner That Auto‑Fixes Attack Chains – Here's How