remedylab.net

What It Is

RemedyLab Security Scanner is a collection of online security scanning tools designed for authorized security testing, with a focus on network reconnaissance, TLS analysis, and web security auditing. The page clearly states that networks or systems should only be scanned with permission, indicating that it is geared more toward security self-assessment and basic evaluation than a managed security operations platform.

Core Capabilities

In terms of protection coverage, it includes TLS Cipher Scanner, SSL Cert Analyzer, Headers Audit, Cookies Audit, DNS Tools, and Version Checker. The TLS module can analyze SSL/TLS configurations and cipher suites, and identify weak encryption protocols. Certificate analysis can check validity, SAN coverage, hostname matching, and revocation endpoints. The HTTP header audit focuses on safeguards such as HSTS, CSP, and X-Frame-Options. The Cookie audit checks Secure, HttpOnly, and SameSite attributes. The DNS tools support common record lookups and check DNSSEC, SPF, and DMARC. Version Checker can detect outdated versions of components such as Bootstrap, jQuery, WordPress, React, Vue, and Angular.

Pricing and Deployment

The page does not disclose pricing, plans, payment methods, or enterprise licensing models. It also does not state whether API access, local deployment, private deployment, or bulk scanning is supported. Based on the page content, it appears more like an online tool that can be used directly, but it should not be assumed to be permanently free or backed by commercial service commitments.

Pros and Cons

Its strengths are that it covers many common checks in a website security baseline, has clear functional boundaries, and is suitable for quickly identifying issues related to TLS, certificates, DNS, HTTP headers, and frontend component versions. Its limitations are that there is no visible risk grading, scan reporting, historical trends, asset management, alerting, team permissions, compliance certifications, or third-party integrations. Service support information is also missing, so its suitability for enterprise deployment is unclear.

Who It’s For and Access from China

It is suitable for website administrators, developers, security researchers, or small teams conducting pre-launch and routine baseline checks within an authorized scope. The page does not provide information about access from China, so network connectivity and payment methods are both unknown. If access is unstable or a local compliance-friendly alternative is required, options to consider include Qualys SSL Labs, Mozilla Observatory, securityheaders.com, DNSViz, MxToolbox, or security testing and vulnerability scanning products from Chinese cloud providers.