tag} other {# pages have no <title> tag}}","recommendation":"Add a descriptive, unique <title> tag to every page. Titles are the primary signal search engines show in results."},"on-page-title-length":{"title":"{count, plural, one {# page has a title} other {# pages have titles}} outside 30–65 chars","recommendation":"Keep title tags between 30–65 characters including the brand suffix. Front-load important keywords."},"on-page-duplicate-titles":{"title":"{count, plural, one {# duplicate title group} other {# duplicate title groups}} detected","recommendation":"Every page should have a unique title. Duplicate titles confuse search engines about which page to rank."},"on-page-missing-meta-description":{"title":"{count, plural, one {# page is missing a meta description} other {# pages are missing a meta description}}","recommendation":"Write a concise meta description (120–160 chars) for each page. Though not a direct ranking factor, it affects click-through rates."},"on-page-desc-length":{"title":"{count, plural, one {# page has a meta description} other {# pages have meta descriptions}} outside the ideal length","recommendation":"Keep meta descriptions between 120–160 characters. Too short wastes space; too long gets truncated in SERPs."},"on-page-duplicate-meta-descriptions":{"title":"{count, plural, one {# duplicate meta description group} other {# duplicate meta description groups}} found","recommendation":"Write unique meta descriptions for every page to maximize click-through rates in search results."},"on-page-missing-h1":{"title":"{count, plural, one {# page is missing an H1 heading} other {# pages are missing H1 headings}}","recommendation":"Add one H1 per page that clearly describes the page topic. It is a strong on-page signal for search engines."},"on-page-multiple-h1":{"title":"{count, plural, one {# page has multiple H1 headings} other {# pages have multiple H1 headings}}","recommendation":"Use exactly one H1 per page. Additional H1 elements dilute the primary keyword signal."},"on-page-heading-hierarchy":{"title":"{count, plural, one {# page has skipped heading levels} other {# pages have skipped heading levels}}","recommendation":"Maintain a logical heading hierarchy (H1 → H2 → H3). Skipping levels degrades both accessibility and crawlability."},"on-page-missing-alt-text":{"title":"{count, plural, one {# image is missing alt text} other {# images are missing alt text}}","recommendation":"Add descriptive alt text to all images. Alt attributes help search engines understand image content and improve accessibility."},"on-page-weak-anchors":{"title":"{count, plural, one {# weak anchor text found} other {# weak anchor texts found}}","recommendation":"Replace generic anchor text like 'click here' or 'read more' with descriptive text that tells users and search engines what the linked page is about."},"on-page-empty-anchors":{"title":"{count, plural, one {# empty anchor found} other {# empty anchors found}}","recommendation":"Every link should have meaningful anchor text. Empty anchors provide no context to users or crawlers."},"technical-seo-non-https":{"title":"{count, plural, one {# page is served over HTTP} other {# pages are served over HTTP}}","recommendation":"Migrate all pages to HTTPS. Google uses HTTPS as a ranking signal and browsers warn users about non-secure pages."},"technical-seo-4xx-pages":{"title":"{count, plural, one {# page returns a 4xx error} other {# pages return 4xx errors}}","recommendation":"Fix or redirect broken pages. 4xx responses waste crawl budget and create a poor user experience."},"technical-seo-5xx-pages":{"title":"{count, plural, one {# page returns a 5xx error} other {# pages return 5xx errors}}","recommendation":"Resolve server errors immediately. 5xx responses signal instability to search engines and can cause de-indexing."},"technical-seo-redirect-chains":{"title":"{count, plural, one {# redirect chain detected} other {# redirect chains detected}}","recommendation":"Shorten redirect chains to a single hop. Long chains slow crawling and dilute PageRank."},"technical-seo-missing-canonical":{"title":"{count, plural, one {# page is missing a canonical tag} other {# pages are missing canonical tags}}","recommendation":"Add a canonical tag to every page to prevent duplicate-content issues and concentrate PageRank on the preferred URL."},"technical-seo-canonical-mismatch":{"title":"{count, plural, one {# page has a self-referencing canonical mismatch} other {# pages have canonical mismatches}}","recommendation":"Ensure the canonical URL exactly matches the page's canonical URL, including protocol and trailing slash."},"technical-seo-robots-txt":{"title":"robots.txt issues detected","recommendation":"Review your robots.txt to ensure you are not accidentally blocking important pages from crawlers."},"technical-seo-sitemap-missing":{"title":"XML sitemap not found","recommendation":"Create and submit an XML sitemap to help search engines discover all your important pages efficiently."},"technical-seo-sitemap-no-lastmod":{"title":"{count, plural, one {# sitemap entry is missing lastmod} other {# sitemap entries are missing lastmod}}","recommendation":"Add <lastmod> dates to sitemap entries so search engines can prioritise recently updated pages."},"technical-seo-orphaned-noindex":{"title":"{count, plural, one {# page is noindexed but has no inbound links} other {# pages are noindexed but have no inbound links}}","recommendation":"Remove orphaned noindex pages or add them to the navigation to avoid wasting crawl budget."},"ai-readiness-bot-blocked":{"title":"{bot} crawler is blocked by robots.txt","recommendation":"Allow {bot} in robots.txt to enable your content to be cited by AI answer engines."},"ai-readiness-all-major-bots-blocked":{"title":"All major AI crawlers are blocked","recommendation":"Update robots.txt to allow GPTBot, ClaudeBot, and PerplexityBot so your content can appear in AI-generated answers."},"ai-readiness-llms-txt-missing":{"title":"llms.txt file is missing","recommendation":"Add a /llms.txt file to guide AI crawlers about which content they may use and how to cite your site."},"ai-readiness-llms-txt-malformed":{"title":"llms.txt file is malformed","recommendation":"Fix the syntax errors in your llms.txt file so AI crawlers can parse it correctly."},"ai-readiness-qa-signals-missing":{"title":"Q&A signals are missing","recommendation":"Add FAQ schema or clearly structured Q&A sections. AI engines prefer content structured as direct question-answer pairs."},"ai-readiness-author-byline-missing":{"title":"{count, plural, one {# page is missing an author byline} other {# pages are missing author bylines}}","recommendation":"Add visible author attribution and link it to an author profile page. E-E-A-T signals matter for AI citation."},"ai-readiness-date-signals-missing":{"title":"{count, plural, one {# page is missing publication date signals} other {# pages are missing publication date signals}}","recommendation":"Add visible publication and last-modified dates. AI engines favour up-to-date, timestamped content."},"ai-readiness-wikidata-entity-missing":{"title":"No Wikidata entity linked for this site","recommendation":"Create or claim a Wikidata entity for your brand. Knowledge graph presence improves AI citation trustworthiness."},"structured-data-missing-jsonld":{"title":"{type} structured data is missing","recommendation":"Add {type} JSON-LD markup to help search engines understand your content type and enable rich results."},"structured-data-parse-errors":{"title":"{count, plural, one {# structured data parse error} other {# structured data parse errors}} found","recommendation":"Fix JSON-LD syntax errors. Invalid structured data is ignored by search engines and ineligible for rich results."},"structured-data-conflicting-ids":{"title":"{count, plural, one {# conflicting @id found in structured data} other {# conflicting @ids found in structured data}}","recommendation":"Ensure each entity has a unique @id across all JSON-LD blocks on the page."},"structured-data-article-incomplete":{"title":"Article schema is missing required field: {field}","recommendation":"Add the missing required fields to your Article schema to qualify for rich results in Google Search."},"structured-data-product-incomplete":{"title":"Product schema is missing required field: {field}","recommendation":"Add the missing required fields to your Product schema. Incomplete product markup cannot qualify for shopping rich results."},"structured-data-faq-incomplete":{"title":"FAQPage schema is missing required field: {field}","recommendation":"Complete the FAQPage schema with all required fields to be eligible for FAQ rich results."},"structured-data-organization-incomplete":{"title":"Organization schema is missing required field: {field}","recommendation":"Add the missing required fields to your Organization schema to improve knowledge panel eligibility."},"content-thin":{"title":"{count, plural, one {# page has thin content} other {# pages have thin content}}","recommendation":"Expand thin pages to at least 300 words of substantive content, or consolidate them into a stronger page."},"content-duplicate":{"title":"{count, plural, one {# page has near-duplicate content} other {# pages have near-duplicate content}}","recommendation":"Consolidate duplicate content with canonical tags or 301 redirects to avoid splitting ranking signals."},"content-stale":{"title":"{count, plural, one {# page has stale content} other {# pages have stale content}}","recommendation":"Refresh or redirect stale pages. Up-to-date content ranks better and earns more AI citations."},"content-reading-level":{"title":"{count, plural, one {# page has readability issues} other {# pages have readability issues}}","recommendation":"Aim for a Flesch reading score above 60. Simpler language improves engagement and AI comprehension."},"content-no-multimedia":{"title":"{count, plural, one {# page has no multimedia} other {# pages have no multimedia}}","recommendation":"Add relevant images, video, or interactive elements to increase dwell time and enrich the content signal."},"performance-psi-not-configured":{"title":"PageSpeed Insights could not be evaluated","recommendation":"Ensure your site is publicly accessible and configure a PSI API key for accurate Core Web Vitals data."},"performance-cwv-lcp":{"title":"{count, plural, one {# page has a poor LCP score} other {# pages have poor LCP scores}}","recommendation":"Improve Largest Contentful Paint to under 2.5 s by optimising images, eliminating render-blocking resources, and using a CDN."},"performance-cwv-cls":{"title":"{count, plural, one {# page has a poor CLS score} other {# pages have poor CLS scores}}","recommendation":"Reduce Cumulative Layout Shift to below 0.1 by reserving space for images and ads, and avoiding late-injected DOM."},"performance-cwv-inp":{"title":"{count, plural, one {# page has a poor INP score} other {# pages have poor INP scores}}","recommendation":"Improve Interaction to Next Paint to under 200 ms by reducing long tasks and deferring non-critical JavaScript."},"performance-render-blocking":{"title":"{count, plural, one {# render-blocking resource detected} other {# render-blocking resources detected}}","recommendation":"Defer or async-load render-blocking scripts and stylesheets to improve First Contentful Paint."},"mobile-a11y-no-viewport":{"title":"{count, plural, one {# page is missing a viewport meta tag} other {# pages are missing a viewport meta tag}}","recommendation":"Add <meta name='viewport' content='width=device-width, initial-scale=1'> to every page for correct mobile rendering."},"mobile-a11y-no-lang":{"title":"{count, plural, one {# page is missing a lang attribute} other {# pages are missing a lang attribute}}","recommendation":"Add a lang attribute to the <html> element to help screen readers and search engines identify the page language."},"mobile-a11y-headings-skip":{"title":"{count, plural, one {# page skips heading levels for accessibility} other {# pages skip heading levels for accessibility}}","recommendation":"Maintain a sequential heading structure to ensure screen readers and assistive technologies can navigate the page correctly."},"mobile-a11y-aria-issues":{"title":"{count, plural, one {# ARIA issue detected} other {# ARIA issues detected}}","recommendation":"Fix ARIA attribute misuse. Incorrect ARIA roles and attributes cause confusion for assistive technologies."},"international-hreflang-missing-return":{"title":"{count, plural, one {# hreflang tag is missing a return link} other {# hreflang tags are missing return links}}","recommendation":"Ensure every hreflang alternate includes a reciprocal link. Incomplete hreflang pairs are ignored by Google."},"international-no-x-default":{"title":"hreflang x-default tag is missing","recommendation":"Add an x-default hreflang tag to specify the default or language-selection page for international visitors."},"international-ip-redirect":{"title":"IP-based geo-redirect detected","recommendation":"Avoid IP-based redirects as Googlebot always crawls from the US. Use hreflang to serve regional content instead."}},"docs":{"layout":{"title":"Documentation","subtitle":"Everything you need to secure your AI-built projects","sections":{"gettingStarted":"Getting Started","integrations":"Integrations","features":"Features","guides":"Guides"},"items":{"overview":"Overview","scanning":"Scanning","fixTemplates":"Fix Templates","restApi":"REST API","claudeCodeMcp":"Claude Code MCP","cicdIde":"CI/CD & IDE","monitoringAlerts":"Monitoring & Alerts","compliance":"Compliance","teams":"Teams","billingUsage":"Billing & Usage","apiKeys":"API Keys","domains":"Domains","badges":"Badges","apiPlayground":"API Playground","securityScore":"Security Score","scannersReference":"Scanner Reference","seoAudit":"SEO Audit","connectedScans":"Connected Scans","repositoryArchives":"Repository ZIP Scans","aiWorkflow":"AI Workflow","quickstart":"Quickstart","understandingReports":"Your Report","mcpQuickInstall":"MCP Quick Install"},"getApiKey":"Get API Key","onThisPage":"On this page","breadcrumbHome":"Home","previous":"Previous","next":"Next"}},"legalShell":{"crumb":"legal","effective":"effective","sectionsCount":"{count, plural, one {# section} other {# sections}}","tableOfContents":"table of contents","humanQuestion":"Need to talk to a human?","plainEnglish":"in plain english","questionsOrRequests":"questions or requests","backToHome":"back to home"},"securityLanding":{"brandLabel":"BoringSec","inputLabel":"Website domain","placeholder":"myapp.com","cta":"Check my site for security issues","ctaShort":"Check site","invalidError":"Enter a valid website domain, for example myapp.com."},"whyBoringsec":{"meta":{"title":"BoringSec vs Free Security Scanners — Why We Go Deeper | BoringSec","description":"Free scanners check one thing, once. BoringSec coordinates {baseModules} URL base modules and {backgroundEngines} verified-owner background engines, then keeps watching.","ogTitle":"BoringSec vs Free Security Scanners","ogDescription":"{baseModules} URL base modules, {backgroundEngines} verified-owner background engines, continuous monitoring, and fixes you can act on."},"hero":{"eyebrow":"BoringSec vs free scanners","headline":"Free scanners check one thing.","headlineSub":"We check everything.","description":"SSL Labs, Mozilla Observatory and securityheaders.com are great at their one job. BoringSec coordinates {baseModules} URL base modules and {backgroundEngines} verified-owner background engines — and keeps watching.","stat":"Broad coverage with explicit limits","seeComparison":"See the full comparison ↓","coverage":{"title":"Categories covered in one scan","boringsecLabel":"One BoringSec scan","caption":"One BoringSec scan replaces all three free tools — and covers the categories they can't see."}},"matrix":{"eyebrow":"Side by side","headline":"What each scanner actually checks","description":"An honest comparison against {tools}. Where free tools are strong, we say so — the difference is how much one BoringSec scan covers.","capabilityHeader":"Capability","support":{"full":"Supported","partial":"Partial","none":"Not supported"},"columns":{"boringsec":"BoringSec","sslLabs":"SSL Labs","observatory":"Mozilla Observatory","securityHeaders":"securityheaders.com"},"notes":{"strong":"Strong","englishOnly":"EN only","tlsOnly":"TLS only","headersOnly":"Headers only"},"values":{"categories":{"boringsec":"{baseModules} base modules","sslLabs":"TLS only","observatory":"Headers + TLS","securityHeaders":"Headers only"}},"rows":{"categories":"Base URL modules","headers":"HTTP security headers (15+)","ssl":"Deep SSL/TLS analysis","dns":"DNS (SPF, DMARC, DKIM, CAA, DNSSEC)","secrets":"Exposed secrets & API keys","cve":"Known CVEs in your tech stack","database":"Database security (Supabase, Firebase)","gdpr":"GDPR & privacy checks","reputation":"Malware & blacklist reputation","monitoring":"Continuous monitoring over time","fixes":"Plain-language & AI-ready fixes","localized":"Reports in 10 languages","grade":"Unified A++ to F grade","automation":"API, CI/CD & Slack integration"},"coverageRow":"Categories covered","coverageOf":"of {total}"},"deepDive":{"eyebrow":"Where the difference shows","headline":"Four things a one-shot scanner can’t do","breadth":{"title":"One workflow, independent modules","description":"Headers, TLS, DNS, cookies, CORS, exposure, injection, XSS, subdomains, secrets, databases, technology CVEs, privacy, reputation and more — aggregated into a single A++ to F grade instead of three separate tools you have to run and reconcile yourself.","points":{"0":"{baseModules} base modules in one workflow","1":"One unified score & report","2":"{backgroundEngines} verified-owner background engines"}},"hidden":{"title":"Catches what header-checkers can’t","description":"Free scanners read your response headers. BoringSec reads your shipped JavaScript and infrastructure — finding exposed Stripe, AWS, Supabase and GitHub keys, open Supabase RLS and Firebase rules, and known CVEs in the libraries you actually use.","points":{"0":"Leaked API keys in your bundles","1":"Open database rules (RLS / Firebase)","2":"CVEs matched via the OSV database"}},"monitoring":{"title":"Security isn’t a one-time check","description":"A clean scan today says nothing about next week. BoringSec keeps watching — re-scanning on a schedule and alerting you to certificate expiry, defacement, new vulnerabilities, blacklisting and downtime.","points":{"0":"Scheduled re-scans from $19/mo","1":"Certificate-expiry countdown","2":"Defacement & blacklist alerts"}},"remediation":{"title":"Fix it, don’t just find it","description":"Every finding comes with a plain-language explanation, the exact evidence we observed, and a fix you can act on — including AI-ready fix prompts. And the whole report renders in the language of the site you scanned.","points":{"0":"Plain-language remediation","1":"Copy-paste AI fix prompts","2":"Localized in 10 languages"}}},"whyNotFree":{"headline":"Why free scanners aren’t enough","description":"They’re excellent spot-checks for a single dimension. They were never meant to be your whole security picture.","points":{"0":"They check one axis — you still need three or more tools to cover the basics.","1":"They’re point-in-time — no monitoring, no alerts when something changes.","2":"They can’t see leaked secrets, open databases or vulnerable dependencies.","3":"Reports are English-only and rarely tell you how to actually fix the issue."}},"trust":{"eyebrow":"We respect these tools","body":"We genuinely like {tools} — we use them too. They do their one job well, and this isn’t about replacing a good TLS or header check. It’s about everything those checks can’t see. BoringSec gives you the complete picture in one place."},"cta":{"headline":"See what one scan","headlineSub":"really finds.","description":"Free, no signup. Applicable base results appear first.","pricingLink":"Compare plans & monitoring →"}},"sampleReport":{"meta":{"title":"BoringSec sample report | Progressive evidence, fixes, and monitoring","description":"A representative BoringSec report walkthrough showing progressive scanner states, verified evidence, AI interpretation, coverage limits, fixes, retests, and Care monitoring."},"hero":{"eyebrow":"Representative walkthrough · not a live scan","title":"Evidence, fix prompts, and retest workflow in one report.","description":"Follow a report from the first verified evidence through independent deep scanners, AI-assisted remediation, re-testing, and continuous monitoring. Every value on this page is labelled as representative—not customer telemetry.","card":{"scanLabel":"Security scan · representative","partial":"Partial","baseReady":"Base report ready for review","enginesContinue":"Independent deep engines continue","confidence":"Score confidence follows verified coverage"}},"progressive":{"eyebrow":"Progressive delivery","title":"Useful evidence now. Deeper coverage without blocking the report.","description":"Base modules publish their verified observations first. Nuclei, OWASP ZAP, and Medusa keep their own state and join the same report only when their results are ready. Pending and unavailable never mean passed.","states":{"base":{"name":"Base security modules","state":"Report ready","description":"Verified URL evidence is available now."},"nuclei":{"name":"Nuclei","state":"Running","description":"Template-backed checks continue independently."},"zap":{"name":"OWASP ZAP","state":"Queued","description":"The base report does not wait for this engine."},"medusa":{"name":"Medusa","state":"Unavailable in this sample","description":"No verified Medusa result was produced, so no clean pass is inferred."}},"trustLabel":"What the reader can trust:","trustBody":"Only completed, verified scanner output can become a confirmed finding or a clean pass. The report refreshes as independent engines finish; it never invents a result to fill a gap."},"findings":{"eyebrow":"Findings","title":"Evidence is the source of truth. Interpretation stays labelled.","observedLabel":"Observed by scanner","aiLabel":"AI interpretation","critical":{"severity":"Critical","evidenceBadge":"Verified live evidence","title":"Supabase service-role key exposed in client bundle","observed":"A browser-delivered JavaScript asset contains a Supabase service-role token fingerprint. The secret value is redacted from the report.","interpretation":"Treat the token as compromised: rotate it, move privileged calls server-side, and review Supabase audit activity. This guidance does not replace the scanner evidence above."},"medium":{"severity":"Medium","evidenceBadge":"Verified HTTP evidence","title":"Content Security Policy is missing","observed":"The final HTML response did not include a Content-Security-Policy or Content-Security-Policy-Report-Only header. Response details are retained as evidence.","interpretation":"Start in report-only mode, review violations, then enforce a policy scoped to the application's actual script and connection origins."}},"passed":{"title":"Passed checks","items":{"tls":"TLS certificate is valid and not near expiry.","dmarc":"DMARC policy is present for the primary domain.","env":"No public .env file detected on common exposure paths.","malware":"No malware or defacement signal in the latest monitor check."}},"score":{"title":"Score transparency","description":"This walkthrough does not publish a made-up final score. A real report labels the score as assessed, provisional, or not assessed from its verified weighted coverage, and keeps pending, partial, and unavailable scanners visible.","base":{"label":"Base coverage","value":"Completed"},"deep":{"label":"Deep coverage","value":"Still in progress"},"unavailable":{"label":"Unavailable","value":"Never counted as passed"}},"fix":{"title":"AI fix prompt","prompt":"Remove the exposed Supabase service-role credential.\nRotate and revoke the compromised key before deployment.\nMove privileged operations into a server-only module.\nKeep only the anon key in browser-delivered code.\nAdd a build test that rejects service-role fingerprints.","note":"Generated from the verified finding context. Secrets and sensitive evidence stay redacted from the prompt."},"compliance":{"title":"Compliance mapping","description":"References help route remediation work. They do not claim certification or legal compliance.","openFixQueue":"Open fix queue","retest":"Retest after fix"},"monitoring":{"eyebrow":"Care monitoring","title":"Make this report the baseline, not the finish line.","description":"Care watches uptime, SSL, DNS, blocklists, client-side threats, defacement, and recurring deep scan results. It records verified changes and keeps incomplete scanners visible instead of turning them into false reassurance.","seeCare":"See Care monitoring","readDocs":"Read monitoring docs","historyTitle":"Honest score and finding history","historyDescription":"No past runs are fabricated for this sample. History begins after ownership verification and Care activation.","timelineAria":"Monitoring timeline","timeline":{"baseline":{"label":"Baseline","title":"Current verified report","description":"Captured after activation"},"weekly":{"label":"Weekly","title":"Compare deep results","description":"New, resolved, and changed"},"change":{"label":"On change","title":"Alert, fix, re-test","description":"Only verified regressions"}},"channels":{"email":"Email owner","slack":"Slack team","webhook":"Signed webhook"}}},"careUpsell":{"eyebrow":"Continue from this report","title":"Turn today's report into a monitored baseline","description":"Care compares future verified results with this scan, records the change history, and alerts you when the site regresses. Pending or unavailable scanners are never reported as a clean pass.","features":{"weekly":"Weekly deep scan plus continuous service checks","history":"Score and finding history after activation","notifications":"Email, Slack, and webhook notifications","retests":"Unlimited re-tests and a live security badge"},"cta":"Activate Care for this site","note":"From €29/month. Domain ownership is verified before monitoring starts.","lifecycleAria":"Care monitoring lifecycle","steps":{"baseline":{"label":"1 · Baseline","body":"This verified report"},"compare":{"label":"2 · Compare","body":"Every weekly deep scan"},"act":{"label":"3 · Act","body":"Verified regression → alert and re-test"}}},"care":{"meta":{"title":"Care monitoring for live AI-built apps | BoringSec","description":"Care keeps one live app watched with uptime, SSL, DNS, blacklist, client-threat, defacement, weekly deep scans, alerts, retests, and a live badge.","ogTitle":"Care keeps one live app watched","ogDescription":"Weekly deep scans plus lightweight monitoring and alerts for AI-built apps."},"hero":{"eyebrow":"Care monitoring","headline":"Care keeps one live app watched.","description":"Put your production site on a recurring security loop: weekly deep scans, uptime and SSL checks, DNS change detection, reputation monitoring, tamper signals, alerts, retests, and a live security badge.","startCare":"Start Care","scanFirst":"Scan first"},"console":{"title":"Live app watchlist","subtitle":"One site, multiple probe families, one actionable signal.","status":"Monitoring ready"},"watch":{"eyebrow":"What Care watches","headline":"The checks that catch launch drift and obvious regressions.","items":{"uptime":{"title":"Uptime","description":"Regular availability checks with response-time context before a silent outage becomes customer-visible."},"ssl":{"title":"SSL expiry","description":"Certificate lifetime checks so an expired cert does not break trust or checkout flows."},"dns":{"title":"DNS changes","description":"Detects material DNS record changes that can indicate misconfiguration or takeover risk."},"blacklist":{"title":"Blacklist reputation","description":"Tracks security and reputation sources so you know when a domain is listed and where to request removal."},"clientThreat":{"title":"Client-side compromise","description":"Looks for suspicious client-side signals that can point to injected scripts or dangerous page changes."},"defacement":{"title":"Defacement","description":"Compares content fingerprints and raises a signal when the live page changes in a suspicious way."},"weeklyScan":{"title":"Weekly deep security scan","description":"Runs the deeper BoringSec security audit on a recurring cadence for the monitored site."},"emergingThreats":{"title":"Emerging threat checks","description":"When a new vulnerability affects common AI-app stacks like Next.js, Supabase, Firebase, Stripe, Vercel, or popular npm packages, BoringSec checks monitored domains and tells you whether your app is likely affected."}}},"channels":{"eyebrow":"Alert channels","headline":"Get the signal where you actually work.","description":"Care is intentionally lightweight: email for the owner, Slack for the team, and webhooks for automation. No server agent and no hosted WAF claim.","items":{"email":{"title":"Email","description":"Owner-friendly alerts and report delivery without forcing a dashboard check every day."},"slack":{"title":"Slack","description":"Team-visible signals for urgent monitoring and scan-diff events."},"webhook":{"title":"Webhook","description":"Structured events for your own workflows, ticketing, or internal status systems."}}},"proof":{"eyebrow":"Honest scope","headline":"Built on BoringSec monitoring probes, not a vague platform promise.","description":"Care uses the existing BoringSec monitoring pipeline: uptime, SSL, DNS, blacklist, client-threat, defacement, and recurring scan enrollment. It is not a replacement for an enterprise WAF, EDR, or internal network scanner; it is a focused safety net for a live web app."},"cta":{"headline":"Start with a scan, then keep the site watched.","description":"Use a free preview first, unlock the report if you need fixes, or start Care when the site is already important enough to monitor continuously.","startCare":"Start Care","comparePlans":"Compare plans"}}},"now":"$D2026-07-14T07:08:11.093Z","timeZone":"UTC","children":["$L13","$L14","$L15"]}] </article></body></html>

3:["$","$L12",null,{"formats":"$undefined","locale":"en","messages":{"repositoryArchive":{"badge":"Private repository upload · Pro+","title":"Scan a repository ZIP","description":"For repositories you cannot connect through GitHub. BoringSec reads bounded source and configuration files for static analysis only—uploaded code, install scripts, builds, and package managers are never executed.","deleteScan":"Delete scan","validating":"Validating and securing the ZIP…","drop":"Drop a ZIP here or choose a file","limits":"10 MB compressed · 25 MB unpacked · 500 files · no nested archives or symlinks","authorization":"By uploading, you confirm that you own this repository or have explicit authorization to scan it.","fileMetadata":"{count} files · {compressed} compressed · {uncompressed} unpacked","findingsLabel":"Repository findings","fixLabel":"Fix:","docsLink":"Read the ZIP safety and retention contract","status":{"queued":"Queued for isolated static analysis","scanning":"Static analyzers are scanning source files","completed":"Repository analysis completed","quarantined":"Archive rejected by a safety invariant and deleted","failed":"Analysis did not complete; the private archive was deleted","cleanupPending":"{status} · private source cleanup pending (24h maximum)"},"verification":{"verified":"Verified","highConfidence":"High confidence","reviewOnly":"Review only","signal":"Analysis signal"},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info"},"metrics":{"filesAnalyzed":"files analyzed","securityFindings":"security findings","criticalHigh":"critical + high","otherSignals":"other signals"},"retention":{"raw":"Raw ZIP: private bucket only; deleted immediately after a terminal result, with a 24-hour cleanup fallback.","results":"Manifest and redacted findings: retained for 30 days or deleted sooner by you. Source files are never returned by the API."},"errors":{"authRequired":"Sign in to upload a repository.","rateLimited":"Too many upload attempts. Try again later.","planRequired":"Repository ZIP scanning requires the {tier} plan.","storageUnavailable":"Private repository storage is temporarily unavailable.","invalidUpload":"Choose a valid ZIP file.","authorizationRequired":"Confirm that you own this repository or are authorized to scan it.","tooLarge":"The compressed ZIP must be 10 MB or smaller.","tooManyFiles":"The archive contains too many files.","encrypted":"Encrypted ZIP files cannot be scanned.","nested":"Nested archives are not accepted.","unsafePath":"The archive contains an unsafe file path.","symlink":"Symbolic links are not accepted.","specialFile":"Special device or socket files are not accepted.","compressionRatio":"The ZIP compression ratio exceeds the safe limit.","empty":"Choose a non-empty ZIP repository archive.","activeLimit":"You already have the maximum number of repository scans queued or running.","lengthMismatch":"The upload was incomplete. Choose the file again.","generic":"The ZIP could not be queued safely. Try again.","statusUnavailable":"Live status is temporarily unavailable. The queued scan continues safely.","chooseZip":"Choose a non-empty .zip repository archive.","deleteFailed":"The repository scan could not be deleted. Try again."}},"themeToggle":{"lightThemeEnabled":"Light theme enabled"},"common":{"appName":"BoringSec","loading":"Loading…","error":"Something went wrong","retry":"Retry","cancel":"Cancel","save":"Save","delete":"Delete","confirm":"Confirm","back":"Back","close":"Close","next":"Next","previous":"Previous","or":"or","done":"Done","skip":"Skip","continue":"Continue","submit":"Submit","search":"Search...","addDomain":"Add Domain","signOut":"Sign out","settings":"Settings","billing":"Billing","adminPanel":"Admin Panel","allRightsReserved":"All rights reserved.","skipToContent":"Skip to content"},"homepage":{"hero":{"eyebrow":"Security for Vibe Coders","fastTitle":"Ship fast.","secureTitle":"Ship secure.","description":"Built for Cursor, Lovable, Bolt, v0 projects. We catch the secrets, broken RLS, and auth gaps that AI leaves behind. 70+ checks, instant.","trustNoSignup":"No signup","trustTools":"Works with any website","trustFree":"Free preview","terminalLabel":"boringsec · live scan feed","title":"Find your weak spots before hackers do.","subtitle":"Enter your website address. The first report is usually ready within 60 seconds; connected scanners continue in the background and each result appears as it arrives.","privacyNote":"We use bounded, read-only checks on public surfaces — nothing to install, and any unavailable module is shown in the report.","fieldLabel":"Your website address"},"stats":{"scanned":"Scanned","issuesFound":"Issues found","modules":"Modules","websitesScanned":"Websites scanned","vulnerabilitiesFound":"Vulnerabilities found","scannerModules":"Scanner modules"},"scanners":{"eyebrow":"Standards-backed deep analysis","headline":"Every finding","headlineSub":"cites its standard.","description":"Deterministic scanners validate observable signals and link findings to their source standards: OWASP, MITRE, NIST, CIS, GDPR and relevant technical references. Optional AI analysis is separate, deployment-dependent, and never calculates the Security Score.","items":{"owaspTop10":{"title":"OWASP Top 10","count":"10 cat.","description":"Injection, broken access control, SSRF, XSS, deserialization. Validated with live payloads, not regex. Each finding links to the OWASP cheat sheet."},"mitreCwe":{"title":"MITRE CWE / CVE","count":"900+ IDs","description":"Every weakness maps to a CWE identifier. Audit trail ready for SOC 2, ISO 27001, and procurement reviews."},"cisNist":{"title":"CIS & NIST CSF","count":"80+ ctrl","description":"TLS 1.3, HSTS preload, CSP, COEP, headers, secrets handling. We validate configuration, not just presence."},"gdprPrivacy":{"title":"GDPR & CCPA","count":"Privacy","description":"Cookie banner & consent compliance, third-party trackers, PII exposure, secrets in source maps."},"googleSearch":{"title":"Nuclei & OWASP ZAP","count":"DAST","description":"Independent dynamic security scanners test verified domains for known exposures and web application vulnerabilities; results arrive in the background."},"schemaAi":{"title":"Medusa Code Analysis","count":"SAST","description":"Static code analysis detects insecure patterns, exposed secrets, and dependency risks without executing the analyzed code."}}},"entryPoints":{"eyebrow":"What's in the report","headline":"Every issue explained","headlineSub":"like a human would.","description":"Open a sample report to see severity, the affected URL or selector, standards citations, captured evidence when available, and a clear explanation. Modules that cannot verify a result are shown honestly instead of being hidden.","items":{"severityScored":{"title":"Severity-Scored Findings","description":"Every issue scored on CVSS 4.0 + business impact. Critical / High / Medium / Low / Info, so you know what to fix today vs. queue for next sprint.","label":"CVSS-aligned"},"standardsCitations":{"title":"Standards Citations on Every Line","description":"Each finding links directly to its source: OWASP article, CWE entry, NIST control, Google doc. Defensible in front of auditors, procurement, and your board.","label":"Linked to source"},"aiExplanations":{"title":"AI-Written Explanations","description":"Optional AI analysis can explain evidence in context when a server-side provider is explicitly configured. Deterministic findings, evidence and scoring remain available without it.","label":"Tailored per stack"},"remediation":{"title":"Step-by-Step Remediation","description":"Every finding ships with the exact fix: code diffs, config snippets, or paste-ready prompts for Cursor, Claude Code, Lovable, Bolt, v0, Windsurf.","label":"Ready to paste"}}},"checklist":{"headline":"Deep analysis,","headlineSub":"not surface scans.","scanNow":"Scan now","items":{"securityHeaders":"Security Headers","sslTls":"SSL / TLS","dnsSecurity":"DNS Security","secretDetection":"Secret Detection","databaseSecurity":"Database Security","injectionXss":"Injection & XSS","exposure":"Exposure","platformTech":"Platform & Tech"},"description":"Each scan runs the checks applicable to the target. The base report shows what passed, failed, or could not be verified; connected scanners continue independently."},"tools":{"eyebrow":"More tools","compare":{"label":"Compare","sub":"Side-by-side security scores"},"leaderboard":{"label":"Leaderboard","sub":"Top secure websites"},"businessAudit":{"label":"Business Audit","sub":"Free report via email"}},"cta":{"headline":"Check your website now.","headlineSub":"It's free.","description":"A quick first check can surface issues before they become incidents.","sampleReport":"See a sample report"},"products":{"security":{"name":"Security Audit","price":"€24.99","tagline":"Applicable live URL modules","input":"myapp.com","cta":"Scan free →","features":["Headers, SSL/TLS, DNS","Secrets, RLS, auth gaps","XSS, injection, CSRF"],"deepTagline":"Hardens your live URL: finds secrets in bundles, broken auth middleware, RLS gaps, exposed configs, and OWASP-class vulnerabilities."},"code":{"name":"Code Audit","price":"€24.99","tagline":"Full repo scan: security + code quality","input":"owner/repo","cta":"Audit free →","features":["Secrets, auth flaws, webhooks","TypeScript strictness, dead code","Dependency hygiene, test coverage"]},"seo":{"name":"SEO Audit","price":"€34.99","newBadge":"NEW","tagline":"100-page crawl + AI-search readiness","input":"myapp.com","cta":"Scan free →","features":["GPTBot, Claude, Perplexity","llms.txt, structured data","Schema.org, hreflang"],"deepTagline":"Crawls up to 100 pages, checking AI-search readiness (GPTBot, Claude, Perplexity), schema.org, hreflang, and Core Web Vitals."},"newHook":"Free security check · first results usually within 60 seconds","freePreview":"Free preview · pricing on the report","noSignupTagline":"no signup · instant"},"liveScans":{"line":"{security, plural, one {1 security audit} other {# security audits}} · {seo, plural, one {1 SEO audit} other {# SEO audits}} running now","lineSecurity":"{security, plural, one {1 security scan running now} other {# security scans running now}}"},"comparePromo":{"eyebrow":"BoringSec vs free scanners","title":"Free scanners check one thing. We coordinate {baseModules} base modules.","subtitle":"See exactly how we compare to SSL Labs, Mozilla Observatory and securityheaders.com, and what they can't catch.","cta":"Compare us vs free scanners"},"referral":{"welcomeFrom":"Welcome from","appliedAtCheckout":"applied at checkout."},"comparison":{"eyebrow":"BoringSec vs free scanners","headline":"Free scanners check one thing.","headlineAccent":"One workflow covers more.","description":"SSL Labs, Mozilla Observatory and securityheaders.com are focused tools. BoringSec brings {baseModules} URL base modules and {backgroundEngines} verified-owner background engines into one workflow. Continuous monitoring is optional.","capability":"Capability","tableLabel":"Security scanner capability comparison","note":"We genuinely like these tools and use them too. This comparison shows where each tool is focused; availability can change.","rows":{"categories":"Base URL modules","headers":"HTTP security headers (15+)","ssl":"Deep SSL/TLS analysis","dns":"DNS (SPF, DMARC, DKIM, CAA, DNSSEC)","secrets":"Exposed secrets and API keys in bundles","cves":"Known CVEs in your tech stack","database":"Database security (Supabase, Firebase)","privacy":"GDPR and privacy checks","reputation":"Malware and blacklist reputation","monitoring":"Optional continuous monitoring","fixes":"Plain-language and AI-ready fixes","languages":"Reports in 10 languages","grade":"Unified A++ to F grade"},"values":{"yes":"Supported","no":"Not supported","partial":"Partial","paid":"Paid plan","limited":"Limited","categories19":"{baseModules} base modules","tlsOnly":"TLS only","headersTls":"Headers + TLS","headersOnly":"Headers only","severalTools":"Several tools"}},"orbit":{"eyebrow":"What happens when you press Scan","headline":"One workflow, independent layers.","sub":"Independent checks cover eight core layers of your website. When applicable or explicitly connected, additional modules assess ports, subdomains, malware signals, repositories, and cloud configuration. Base results appear first; extended scanners continue in the background.","ring":{"checks":"INDEPENDENT CHECKS","engine":"ANALYSIS ENGINE","extended":"OPTIONAL & CONNECTED COVERAGE"},"deliver":"Scored report · Fix snippets · Monitoring","engine":{"ai":"AI analysis","scoring":"Severity scoring","mapping":"Standards mapping","fixes":"Fix generation"},"checksWord":"checks","extra":{"ports":"Open ports","subdomains":"Subdomains","waf":"WAF detection","cors":"CORS policy","cookies":"Cookies & consent","malware":"Malware & blacklists","repos":"Code & repo leaks","cloud":"Cloud configs (planned)"}},"why":{"eyebrow":"Why this matters","headline":"Not a tech person?","headlineSub":"This is still about you.","items":{"robots":{"title":"Hackers don't choose targets. Robots do.","text":"Most attacks are automated. Bots probe every website on the internet, small ones included. Yours is being tested right now — whether you know it or not."},"cost":{"title":"One leak can cost you the business.","text":"A stolen customer list, a defaced page, a warning in Google — trust takes years to build and one incident to lose. Privacy fines come on top."},"invisible":{"title":"You can't fix what you can't see.","text":"Most weak spots are silent: nothing looks broken until it's too late. A scan makes them visible — in plain language, not tech-speak."}}},"how":{"eyebrow":"How it works","headline":"Three steps.","headlineSub":"No installs. No signup.","steps":{"paste":{"title":"Paste your address","text":"Type your website address and press Scan. That's all we need from you."},"checks":{"title":"We coordinate {baseModules} base modules","text":"The same standards big companies are audited against: OWASP, NIST, GDPR and more."},"fix":{"title":"You get a fix list","text":"Every issue explained in plain words, with a step-by-step fix you can hand to your developer — or paste into AI."}}},"statement":"Independent scanners. Evidence-backed findings. Clear fixes.","midCta":{"title":"Two minutes now beats two weeks after a hack."},"faq":{"title":"Questions people actually ask","items":{"safe":{"q":"Is the scan safe for my website?","a":"We use rate-limited, read-only checks against public surfaces. We do not log in or modify your site; deeper modules run independently and report any limits or failures."},"free":{"q":"Is it really free?","a":"Yes — the scan and a preview of your results are free, no card and no signup. If you want the full detailed report, you'll see clear pricing right on the results page."},"technical":{"q":"I'm not technical. Will I understand the results?","a":"That's exactly who we built this for. Every issue is explained in plain words, and each fix comes as a step-by-step list you can hand to any developer — or paste into AI."},"after":{"q":"What happens after the scan?","a":"You see your score and the most important findings right away. Nothing is sent anywhere and no one calls you — it's your report, and the next step is yours."}},"closing":"Still curious? The first look is free, and base results usually start appearing within 60 seconds."}},"header":{"scanDomain":"Scan another domain","pricing":"Pricing","signIn":"Sign in","signUp":"Get started","nav":{"compare":{"label":"Compare","description":"Compare security scores"},"leaderboard":{"label":"Leaderboard","description":"Top secure websites"},"badge":{"label":"Badge","description":"Security badge widget"},"mcp":{"label":"MCP","description":"Install in Claude Code or Cursor"},"pricing":{"label":"Pricing","description":"Plans & features"},"freeAudit":{"label":"Free Security Audit","description":"For small businesses"},"whyBoringsec":{"label":"Why BoringSec","description":"How we compare to free scanners"}},"menu":{"openMenu":"Open menu","closeMenu":"Close menu","startInUnderAMinute":"Start in under a minute","mobileNavLabel":"Mobile navigation menu","mainNavLabel":"Main navigation"},"languageSwitcher":{"ariaLabel":"Switch language","sectionLabel":"Language","languages":{"en":"English","es":"Español","pt-BR":"Português","fr":"Français","de":"Deutsch","ja":"日本語","ko":"한국어","it":"Italiano","nl":"Nederlands","pl":"Polski"}},"userMenu":{"openMenu":"Open user menu","dashboard":"Dashboard","reports":"Reports","billing":"Billing","settings":"Settings","signOut":"Sign out","openDashboard":"Open dashboard"}},"footer":{"tagline":"Detailed security analysis for solo founders and indie hackers","product":"Product","resources":"Resources","legal":"Legal","copyrightSuffix":"All rights reserved.","privacyLink":"Privacy","termsLink":"Terms","aboutLink":"About","pricingLink":"Pricing","links":{"securityScanner":"Security Scanner","compareScores":"Compare Scores","leaderboard":"Leaderboard","securityBadge":"Security Badge","freeAudit":"Free Audit","securityAudit":"Security Audit","codeAudit":"Code Audit","seoAudit":"SEO Audit","affiliateProgram":"Affiliate program","whyBoringsec":"Why BoringSec","care":"Care monitoring","methodology":"Methodology","compareIntruder":"BoringSec vs Intruder","sampleReport":"Sample report","trust":"Trust center","blog":"Blog","docs":"Docs","howItWorks":"How It Works","comparisons":"Comparisons","vibeCheck":"Vibe-coded apps","mcp":"MCP for AI agents","docsHome":"Documentation","docsScanning":"Scanning","docsMonitoring":"Monitoring","docsApi":"API reference","docsIntegrations":"Integrations","docsFixTemplates":"Fix templates"},"platform":{"title":"Platform","signIn":"Sign In","allSystemsOperational":"All systems operational","getStarted":"Get started"},"status":{"operational":"All systems operational"},"badgeAlt":"BoringSec security score","compare":"Compare","documentation":"Documentation"},"scanForm":{"placeholder":"myapp.com or owner/repo","input":{"ariaLabel":"Website URL or GitHub repository","ariaInvalid":"Enter a valid URL or GitHub repository"},"button":{"scan":"Scan","scanning":"Scanning...","done":"Done!","ariaScanning":"Scanning in progress","ariaScan":"Start security scan"},"hint":"Paste a website URL or GitHub repo link, and we auto-detect which scan to run.","typeBadge":{"repo":"repo","website":"website"},"errors":{"invalid":"Enter a website URL (e.g., myapp.vercel.app) or GitHub repo (e.g., owner/repo)","privateRepo":"This repository is private. Only public repos supported for now.","network":"Could not reach the target. Check the URL and try again.","rateLimited":"Too many scans. Please wait a moment.","timeout":"Scan timed out. Target may be slow to respond.","unknown":"Something went wrong. Please try again."},"retry":"Retry","scanning":{"label":"Scanning {target}"},"steps":{"url":["Resolving DNS...","Checking SSL/TLS...","Analyzing headers...","Scanning for exposed secrets...","Testing database security...","Detecting platform...","Testing injection vectors...","Calculating score..."],"github":["Fetching repository tree...","Checking for .env files...","Scanning .gitignore...","Auditing dependencies...","Analyzing Dockerfile...","Checking GitHub Actions...","Scanning source for secrets...","Generating report..."]},"formAriaLabel":"Security scan","consent":{"title":"Scan Confirmation","description":"You are requesting a security analysis for:","whatWeCheck":"What we will check:","showTechnical":"Show technical details","hideTechnical":"Hide technical details","actions":{"headers":{"title":"HTTP Security Headers","description":"Check protection settings against XSS, clickjacking and other attacks","technical":"CSP, HSTS, X-Frame-Options, X-Content-Type-Options, etc."},"ssl":{"title":"SSL/TLS Certificate","description":"Verify your HTTPS certificate and connection encryption","technical":"Validity period, chain of trust, supported protocols"},"dns":{"title":"DNS Security Records","description":"Check protection against email spoofing from your domain","technical":"SPF, DMARC, DKIM, DNSSEC, CAA records"},"cookies":{"title":"Cookie Security","description":"Check cookie settings on your website","technical":"Secure, HttpOnly, SameSite flags"},"cors":{"title":"CORS Configuration","description":"Check cross-origin resource access policy","technical":"Access-Control-Allow-Origin and related headers"},"sensitiveFiles":{"title":"Sensitive File Detection","description":"Check for accidentally exposed service files","technical":".env, .git, backup files, configs"}},"noticeTitle":"Important to understand:","noticeItems":["The initial scan usually completes within 60 seconds","We send HTTP requests to your server","This is safe and does not affect website operation","Results are visible only to you"],"agreementPrefix":"I confirm that I am the owner of","agreementConnector":"or have","agreementSuffix":"permission to conduct a security analysis. I understand what actions will be performed.","startScanning":"Start Scanning"},"overlay":{"analyzing":"analyzing","progress":"progress","currentPhase":"current phase","liveFindings":"live findings","signalsFound":"signals found","captured":"{count} captured","spinningUp":"spinning up scanners…","deepAnalysis":"deep analysis in progress","detailsUnlock":"details and full findings unlock once your report is ready","finalizingReport":"finalizing report…","pipeline":"scan pipeline","requestsFired":"requests fired","checksRun":"checks run","standardsCited":"standards cited","signalsLocked":"{count, plural, =0 {analysis in progress · full breakdown in your report} one {# signal found · full breakdown unlocks in your report} other {# signals found · full breakdown unlocks in your report}}"}},"report":{"scanAnother":"Scan another","scanYourDomain":"Scan Your Domain","backToPreview":"Back to preview","unlockSuccess":{"confirmingTitle":"Confirming your payment","confirmingDescription":"This usually takes a few seconds. Please don't close this tab.","unlockedTitle":"Unlocked!","loadingDescription":"Loading your full report…","timeoutTitle":"Taking longer than usual","timeoutDescription":"Your payment was successful but unlock is delayed. Check your email; we sent you a direct link to the full report."},"preview":{"hero":{"eyebrow":"Security Audit Complete","scannedLabel":"Scanned {date}","severe":{"headline":"Critical Security Issues Found","subline":"Your site has vulnerabilities that attackers can exploit right now."},"high":{"headline":"High-Severity Issues Detected","subline":"Multiple vulnerabilities reduce your security posture significantly."},"medium":{"headline":"Several Issues Need Attention","subline":"Your site has misconfigurations that should be fixed."},"low":{"headline":"Minor Issues Detected","subline":"Small improvements available. Review the full report for details."},"exploitableNow":"exploitable right now","issuesFound":"issues found in total","riskEyebrow":"Confidential security brief","partial":{"activeEyebrow":"Live preliminary report","failedEyebrow":"Basic report","readyHeadline":"First security checks are ready","failedHeadline":"Basic security checks completed","activeNoSignals":"No issues have appeared in the completed checks yet. Deeper scanners are still running in the background.","activeWithSignals":"{riskSubline} Counts are preliminary and may increase as the remaining scanners finish.","failedNoSignals":"No issues appeared in the completed basic checks. The remaining scanners could not finish.","failedWithSignals":"The completed basic checks found {count, plural, one {# security signal} other {# security signals}}. Counts reflect only the scanners that completed successfully.","scannersFinished":"{completed} of {total} scanners finished"}},"severity":{"critical":{"label":"Critical","sublabel":"Exploitable now"},"high":{"label":"High","sublabel":"Serious risk"},"medium":{"label":"Medium","sublabel":"Should fix"},"low":{"label":"Low","sublabel":"Best practice"},"info":{"label":"Info","sublabel":"Notice"}},"totalFindings":"{count, plural, =0 {No findings} one {total finding} other {total findings}} across {severityLevels} severity levels.","lockedNote":"Full descriptions, exploit details, and step-by-step fixes are locked behind the paid report.","unlockPrompt":"Unlock the full paid report to view protected findings and the remediation plan.","callout":{"withIssues":"{count} with issues","clean":"{count} clean","headline":"Categories with problems"},"vulnerabilityCallout":{"headline":{"critical":"{count, plural, one {# critical vulnerability found} other {# critical vulnerabilities found}}","high":"{count, plural, one {# high-severity issue on {hostname}} other {# high-severity issues on {hostname}}}","medium":"{count, plural, one {# medium-severity issue needs fixing} other {# medium-severity issues need fixing}}"},"exposure":{"critical":"{hostname} has security flaws that an attacker can exploit right now. Specific findings and fixes are protected in the full report.","high":"Multiple high-severity weaknesses on {hostname} reduce your security posture. Specific findings and fixes are protected in the full report.","medium":"Several misconfigurations need attention on {hostname}."},"stats":{"urgentIssues":"urgent issues","criticalAndHigh":"critical + high","estimatedHours":"~{hours}h","estimatedFixTime":"estimated fix time","withFullReport":"with full report","affectedCategories":"affected categories","scannedCategories":"of {count} scanned"},"action":{"lead":"Fix steps, code examples, and exploitation context","tail":"for every issue are in the full report. Unlock to start fixing."}},"categories":{"headline":"Categories with problems","withIssues":"with issues","clean":"clean","unavailable":"{count} unavailable","coverageGaps":"{count} coverage gaps","findingsLockedHint":"Details & fixes for these findings are in the full report.","severityCount":{"critical":"{count, plural, one {# critical} other {# critical}}","high":"{count, plural, one {# high} other {# high}}","medium":"{count, plural, one {# medium} other {# medium}}","low":"{count, plural, one {# low} other {# low}}"},"badges":{"critical":"CRITICAL","high":"HIGH","medium":"MEDIUM","low":"LOW","clean":"CLEAN","limited":"LIMITED","unverified":"UNVERIFIED","unavailable":"UNAVAILABLE"}},"whatYouUnlock":{"headline":"What you unlock","features":{"fullDescriptions":"Full descriptions for every finding","fixInstructions":"Step-by-step fix instructions","aiPrompts":"AI prompts for Cursor / Lovable / Claude / Bolt","severityContext":"Severity context + exploit details","compliance":"Compliance mapping (GDPR / SOC2 / PCI DSS)","pdf":"Downloadable PDF + email delivery","quickWins":"Quick-wins prioritization","templates":"Framework-specific fix templates"}},"sample":{"badge":"Sample","howToFix":"How to fix"},"lockedList":{"moreFindings":"{count, plural, one {# more finding} other {# more findings}} in {category}"},"lockedSamples":{"description":"{n} more findings in {category}","sectionHeader":"What is locked — all finding names, details locked"},"threats":{"headers":{"verdict":"Your site never tells browsers how to protect your visitors.","scenario":"With these protections missing, an attacker can wrap your real page inside a fake one, or quietly slip in a script that reads everything your customers type — logins, phone numbers, card details. Visitors see your genuine site and suspect nothing.","impact":"Stolen customer credentials and payment details — and you look responsible when the complaints arrive."},"ssl":{"verdict":"The padlock on your site isn't as safe as it looks.","scenario":"With a weak or misconfigured certificate, someone on the same Wi‑Fi — a café, an airport, a hotel lobby — can sit between your customer and your site, read what they send, and even change it, while the browser still shows “secure”.","impact":"Intercepted bookings and payments, and browsers soon marking your site “Not secure” — scaring visitors off."},"dns":{"verdict":"The address book that points people to your site can be hijacked.","scenario":"Gaps in your domain settings let an attacker point your own domain — or a convincing look-alike — at a server they control, then harvest logins and payments from people who typed your address perfectly.","impact":"Customers “visit your site” and hand their details to a criminal. You may not notice for weeks."},"exposure":{"verdict":"Files and pages that should be private are reachable by anyone.","scenario":"Backups, admin panels, config files, or database dumps are sitting on a public URL. Attackers run automated scanners that find these in minutes — no skill required — and download whatever's there.","impact":"One exposed file can hand over your entire customer list, internal data, or the keys to your whole system."},"cookies":{"verdict":"The tokens that keep users logged in aren't properly protected.","scenario":"Without the right flags, the “session” that proves someone is logged in can be stolen by a malicious script or read over an insecure connection. The attacker then walks straight into that account — no password needed.","impact":"Account takeovers of your customers — and of your own admin login."},"cors":{"verdict":"Other websites are allowed to talk to yours when they shouldn't be.","scenario":"A too-permissive cross-site setting lets a malicious page your customer happens to open quietly make requests to your site using their logged-in session — reading their data or acting as them in the background.","impact":"Customer data leaks and unauthorized actions triggered from sites you don't control."},"virustotal":{"verdict":"Your domain is showing up on security blacklists.","scenario":"Security vendors and email providers are flagging your domain as suspicious. Once you're on these lists, browsers show red warning pages and your emails land in spam — often because of a past compromise nobody told you about.","impact":"Visitors scared off by warnings, and your emails to customers silently vanishing."},"ports":{"verdict":"Doors into your server are standing open to the whole internet.","scenario":"Services that should only be reachable by you — databases, admin tools, remote access — are exposed publicly. Attackers scan the entire internet for these around the clock and try known passwords and exploits within minutes.","impact":"A direct break-in to your server, with your database and files up for grabs."},"waf":{"verdict":"Nothing is filtering malicious traffic before it hits your site.","scenario":"With no protective layer in front, automated attacks — password guessing, injection attempts, bot floods — reach your application directly and keep hammering, unthrottled, until one gets through.","impact":"A far higher chance of a successful break-in, and of your site being knocked offline."},"injection":{"verdict":"Attackers may be able to trick your site into running their commands.","scenario":"If input isn't handled safely, a crafted entry in a form or a link can make your site run instructions the attacker wrote — dumping your database or bypassing the login entirely.","impact":"Wholesale theft of your stored data, including everything you hold about your customers."},"xss":{"verdict":"Attackers may be able to run their code inside your visitors' browsers.","scenario":"A crafted link or a poisoned input makes your own page run the attacker's script for anyone who views it — stealing sessions, capturing keystrokes, or quietly rewriting what the visitor sees.","impact":"Hijacked customer accounts and a page that works against the very people who trust it."},"gdpr":{"verdict":"Your site handles personal data in ways that break privacy law.","scenario":"Missing consent, leaking data to third parties, or storing information you shouldn't — regulators and opportunistic lawyers look for exactly this, and any visitor can file a complaint.","impact":"Fines that scale with revenue, plus the reputational hit of a public privacy case."},"bundle-secrets":{"verdict":"Secret keys are hidden in your website's public code.","scenario":"API keys, passwords, or tokens are baked into the code every visitor downloads. Anyone can open the browser's developer tools, copy them, and use them to run up bills or reach into your systems.","impact":"Someone else spending your money and using your accounts — until you spot the bill."},"supabase":{"verdict":"Your database may be readable or writable by anyone.","scenario":"If the access rules aren't locked down, the database behind your app can be queried straight from a browser — letting a stranger read your records, or add and delete data, without ever logging in.","impact":"Your entire dataset copied, altered, or wiped by someone you'll never see."},"firebase":{"verdict":"Your database may be readable or writable by anyone.","scenario":"If the security rules aren't locked down, the database behind your app can be read and changed directly from a browser — no account needed — letting anyone pull your records or tamper with them.","impact":"Your entire dataset copied, altered, or wiped by someone you'll never see."},"github":{"verdict":"Your source code or secrets may be publicly exposed.","scenario":"A public repository or a leaked token hands attackers your code, your configuration, and sometimes live credentials — a complete map of every weakness you have, for free.","impact":"Attackers study your app at leisure and walk in through the keys left in the code."},"generic":{"critical":{"verdict":"This area contains a flaw an attacker can exploit right now.","scenario":"A critical weakness here gives an attacker a direct path to your data or your customers — the kind automated tools find and exploit without a person ever getting involved.","impact":"Immediate risk of data theft, account takeover, or your site being used against your customers."},"high":{"verdict":"This area has serious weaknesses that raise your risk of a break-in.","scenario":"High-severity gaps here meaningfully lower the bar for an attacker — combined with one more mistake, they become a way in.","impact":"A realistic route to stolen data or a compromised site if left unfixed."},"medium":{"verdict":"This area has misconfigurations that make an attacker's job easier.","scenario":"On their own these won't hand over the keys, but they weaken your defenses and give an attacker footholds to build on.","impact":"A softer target, and more damage possible once something else goes wrong."},"low":{"verdict":"This area has minor issues worth tidying up.","scenario":"Best-practice gaps that don't expose you today but chip away at your overall security posture.","impact":"Small individual risk — cheap to fix while you're here."}}},"playbook":{"eyebrow":"The attacker's playbook","headline":"How criminals could use what we found on {hostname}","subline":"Plain language, no jargon. Each card is a real way attackers abuse this kind of weakness. The exact findings on your site — and the step-by-step fixes — are in the full report.","threatLabel":"Threat","scenarioLabel":"How the attack works","impactLabel":"What it costs you","danger":{"1":"Worth fixing","2":"Serious","3":"Act now"},"affectedLabel":"{count, plural, one {# finding in this area} other {# findings in this area}}","moreAffected":"{count, plural, one {+ # more affected area} other {+ # more affected areas}} in the full report","unlockThis":"Unlock the fix","unlockAll":"Unlock every fix"},"categoriesUnlock":{"cta":"Unlock fixes","ctaAria":"Unlock the fixes for {category}","lockedHint":"Details & fixes for these findings are in the full report."},"quickRegister":{"eyebrow":"Save your report","headline":"Create a free account to keep this report","body":"We'll email you a secure sign-in link — no password to remember. Your report stays saved to your account and you can re-scan any time.","placeholder":"you@example.com","cta":"Email me my report","sending":"Sending…","successTitle":"Check your inbox","successBody":"We sent a secure link to {email}. Open it to save this report to your account.","consent":"Also send me occasional security tips","error":"Something went wrong. Please try again."},"deliverables":{"headline":"The moment you unlock","items":{"fixes":"Step-by-step fix for every finding","exploit":"How each issue is exploited, in plain words","ai":"Copy-paste AI prompts (Cursor, Claude, Bolt…)","pdf":"Full PDF report, delivered to your inbox","instant":"Instant access · one-time payment · no subscription"}}},"paywall":{"sidebar":{"headline":{"critical":"{count, plural, one {# critical issue locked} other {# critical issues locked}}","high":"{count, plural, one {# high-severity issue locked} other {# high-severity issues locked}}","findings":"{count, plural, one {# finding locked} other {# findings locked}}","default":"Unlock the full report"},"subline":{"critical":"Fix steps and code samples are paywalled. Get instant access:","high":"Get exploit details and step-by-step remediation:","default":"Get every finding with AI fix prompts and PDF delivery:"},"fixStepsNote":"Includes fix steps for all {count} findings","fullDescriptionsNote":"Full descriptions, fixes, and PDF","backToSingle":"← Back to single report","mobileLabel":{"critical":"{count, plural, one {# critical · locked} other {# critical · locked}}","high":"{count, plural, one {# high · locked} other {# high · locked}}","default":"Full report locked"},"firstPurchaseBadge":"First purchase · Save {percent}%","firstPurchaseSave":"You save {amount}"},"trust":{"stripe":"Secure payment via Stripe","pdf":"PDF + email delivery","instant":"Instant access","refund":"Not satisfied? Email support@boringsec.com within 7 days for refund."},"scarcity":{"todayOnly":"Today only: 30% off","useCode":"Use code {code} at checkout","firstPurchaseHeadline":"First purchase · −{percent}%","firstPurchaseLimitedOffer":"Limited offer"},"socialProof":{"purchasedToday":"{count} {label}","label":"reports purchased in the last 24 hours","testimonial1":"Found 3 critical issues we missed in our pen test. Worth every euro.","testimonial1Author":"Maria K., CTO @ TechStartup","testimonial2":"Boring Score caught Supabase RLS issues our auditor didn't. Fixed in 2 hours with the AI prompts.","testimonial2Author":"Alex R., Founder"},"or":"OR","badges":{"mostPopular":"Most popular","bestValue":"Best value"},"thisReport":"This report","thisReportPlus":"This report + {extra} for next scans","valid90Days":"Valid 365 days","youSave":"You save {amount}","perReport":"/ report","perPackage":"{amount} per package","checkoutDisabled":"Checkout opens when the basic report is ready"},"expired":{"title":"This report has expired","subtitle":"Anonymous scan reports are kept for 30 days. Run a fresh scan to see the latest findings.","rescanCta":"Run a fresh scan","createAccount":"Create Account","registerToView":"Register to view full report","reportLabel":"Security Report","reasonExpired":"Originally scanned","reasonAnonymous":"Anonymous reports auto-expire to protect privacy.","daysAgo":"{count, plural, one {# day ago} other {# days ago}}","stats":{"score":"Score","issues":"Issues","critical":"Critical"},"cta":{"registerFree":"Register Free to View Report","or":"or"},"benefits":{"headline":"Why Create a Free Account?","unlimitedAccess":{"title":"Unlimited Report Access","description":"View all your scans anytime, no expiration"},"history":{"title":"Scan History","description":"Track your security improvements over time"},"monitoring":{"title":"Automatic Monitoring","description":"Get alerts when your security score changes"}},"allRightsReserved":"All rights reserved."},"emailGate":{"loading":"Loading…","error":"Could not save your email. Please try again.","unknownError":"Something went wrong. Please try again.","headline":"Get the full security analysis","subline":"Enter your email to unlock the detailed findings for this domain.","cta":"Continue","emailPlaceholder":"you@company.com","marketingConsentLabel":"Send me report reminders and security tips if I do not finish checkout.","marketingConsentNote":"You can unsubscribe in one click.","progressive":{"accountEmailFallback":"your account email","error":"We could not save the delivery address. Please try again.","successTitle":"Report delivery is set","successDescription":"We’ll email a secure link to the initial report at {email} as soon as it’s ready. Deeper checks may continue in the background.","confirmationTitle":"Report delivery needs your confirmation","confirmationSuccessDescription":"Email confirmed. We’ll send the initial report link when it’s ready. Deeper Nuclei, ZAP, and Medusa scans may continue in the background.","confirmationInvalid":"This confirmation link is invalid or has expired. Request another one from the report.","checkInboxTitle":"Check your inbox to confirm","checkInboxDescription":"We sent a one-time confirmation link to {email}. Report delivery stays off until you confirm it.","checkInboxDescriptionGeneric":"We sent a one-time confirmation link. Report delivery stays off until you confirm it.","confirmationUnavailable":"Your scan is running, but we could not send the confirmation email. Retry from the report when the first results appear.","settingUpTitle":"Setting up report delivery","savingRegistered":"Saving delivery to {email}…","registeredDescription":"You’re signed in as {email}. We’re securely setting up delivery of the initial report link.","tryAgain":"Try again","guestTitle":"Get the initial report by email","guestDescription":"Enter your email and we’ll send a secure link as soon as the initial report is ready. Deeper checks may continue in the background.","emailAriaLabel":"Email for the initial report link","emailPlaceholder":"you@company.com","saving":"Saving…","cta":"Email me the initial report link","transactionalNote":"This transactional email only delivers this report. Marketing messages require separate consent."}},"progressiveScan":{"failedTitle":"The remaining scan could not finish","failedDescription":"The first results are still available below. Try a fresh scan for the final report.","completeEyebrow":"Scan complete","firstResultsEyebrow":"First results available","loadingFinalTitle":"Loading the final report","backgroundTitle":"Your scan continues in the background","deepScanCompletedTitle":"Deep scan complete","deepScanCompletedDescription":"Nuclei, OWASP ZAP, and Medusa results are included in this report.","deepScanCompletedWithFailuresTitle":"Deep scan finished with limited results","deepScanCompletedWithFailuresDescription":"Results from completed scanners are included in this report. One or more scanners could not finish.","completeDescription":"All scanners have finished. The completed report will appear in a moment.","backgroundDescription":"You can review the safe summary now while the deeper scanners finish. Detailed findings remain protected in the full report.","signalsFound":"{count, plural, one {# signal found} other {# signals found}}","progressLabel":"Scanner progress","scannersComplete":"{completed} / {total} complete","percentComplete":"{progress}% complete","severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info"},"runningNow":"Running now","allScannersFinished":"All scanners finished","preparingNextScanner":"Preparing the next scanner","notFinished":"Not finished","scannersNotFinished":"{count, plural, one {# scanner not finished} other {# scanners not finished}}","noScannersWaiting":"No scanners waiting","scannerStatus":"{scanner} scanner status","takingLonger":"Taking longer than expected","startNewScan":"Start a new scan","creditReadyTitle":"Your existing report credit is ready","unlockedTitle":"Full report unlocked","creditReadyDescription":"No additional purchase is needed. Your credit will be applied when the remaining scanners finish.","unlockedDescription":"The deeper scanners are still running. The completed report will become available here as soon as it is ready."},"full":{"title":"Security Report","githubTitle":"Repository Security Report","securityScore":"Security Score","boringScore":"Boring Score","verificationNotes":"Verification Notes","partiallyVerified":"{count} partially verified","unverified":"{count} unverified","unavailable":"{count} unavailable","reducedConfidence":"categories reduce confidence in a fully clean result.","noConfirmedIssues":"No confirmed issues found","allChecksPassed":"All checks passed","criticalCount":"{count} critical","highCount":"{count} high","actions":{"rescan":"Rescan","share":"Share","runFreshDeepScan":"Run Fresh Deep Scan"},"analysisCoverage":{"eyebrow":"Analysis Coverage","title":"{active}/{total} scanner categories attached to this report","description":"Today's expansion is mostly visible inside scan reports and exports: deeper scanner evidence, stronger trust signals, and richer technical details for modern categories.","legacyNote":"This looks like an older or reduced-coverage report. A fresh scan is needed to surface the newer analysis layers for {categories}.","andMore":"and more"},"tabs":{"issues":"Issues","fixPlan":"Fix Plan","passed":"Passed","details":"Details"},"categoryLabels":{"headers":"Headers","ssl":"SSL/TLS","dns":"DNS","exposure":"Exposure","cookies":"Cookies","cors":"CORS","virustotal":"Threat Intel","technology":"Tech Stack","injection":"Injection","xss":"XSS","subdomains":"Subdomains","waf":"WAF","ports":"Ports","gdpr":"GDPR","bundleSecrets":"Frontend Secrets","supabase":"Supabase","firebase":"Firebase","reputation":"Domain Reputation","clientThreats":"Client Threats","nuclei":"Nuclei","zap":"OWASP ZAP","medusa":"Medusa Code Check","platform":"AI Platform","github":"Security","typescript-strictness":"TS Strictness","dependency-hygiene":"Dep Hygiene","test-coverage-presence":"Test Coverage","dead-code-signals":"Dead Code"},"codeQuality":{"typescriptStrictness":{"title":"TypeScript Strictness","description":"Checks for strict mode, missing compiler flags, and @ts-ignore suppression overuse."},"dependencyHygiene":{"title":"Dependency Hygiene","description":"Detects outdated major versions, abandoned packages, and risky licenses via the npm registry."},"testCoveragePresence":{"title":"Test Coverage Presence","description":"Static check for test files, test-to-source ratio, and CI test job detection."},"deadCodeSignals":{"title":"Dead Code Signals","description":"Heuristic scan for TypeScript files with exports and no detected inbound imports. Verify with knip or ts-prune."}},"humanSummary":{"secure":{"headline":"Your app looks secure!","body":"No critical, high, or medium security issues were found. Your security fundamentals are solid. Keep monitoring regularly to stay protected."},"critical":{"headline":"{count, plural, one {# critical issue found} other {# critical issues found}}","fixTimeUnder30":"Most of these can be fixed in under 30 minutes with the right prompts.","fixTimeEstimate":"Estimated fix time: about {hours, plural, one {# hour} other {# hours}}.","mostUrgent":"The most urgent: {explanation}.","mostUrgentFallback":"The most urgent issue is \"{title}\"."},"high":{"headline":"{count, plural, one {# important issue to fix} other {# important issues to fix}}","fixTimeUnder30":"These can likely be fixed in under 30 minutes.","fixTimeEstimate":"Estimated fix time: about {hours, plural, one {# hour} other {# hours}}.","topPriority":"Top priority: {explanation}.","startWith":"Start with \"{title}\"."},"medium":{"headline":"{count, plural, one {# improvement suggested} other {# improvements suggested}}","body":"Completed checks confirmed {count, plural, one {# medium-severity finding} other {# medium-severity findings}}. No critical or high-severity findings were confirmed."},"estimatedFixTime":"Estimated fix time: ~{minutes} minutes"},"issueCard":{"howToFix":"How to fix","exploitDetails":"Exploit details","affectedValue":"Affected value","recommendation":"Recommendation","copyFix":"Copy Fix Prompt","copied":"Copied!","aiFixPrompt":"AI Fix Prompt","complianceMapping":"Compliance mapping","reference":"Reference"},"fixPlan":{"title":"Fix Plan","description":"Prioritized remediation steps for your findings","quickWins":"Quick Wins","allFindings":"All Findings","byOwner":"By Owner","empty":"No fixes needed. All checks passed!"},"passedChecks":{"title":"Passed Checks","description":"Security checks your site already passes","empty":"No checks passed yet. Run a full scan to see results."},"technicalDetails":{"title":"Technical Details","headers":"HTTP Headers","sslCert":"SSL Certificate","dnsRecords":"DNS Records","cookies":"Cookies","corsConfig":"CORS Configuration","techStack":"Tech Stack","threatIntel":"Threat Intelligence"},"details":{"common":{"yes":"Yes","no":"No","copy":"Copy","copied":"Copied"},"dns":{"unavailable":"No DNS data available","noRecord":"No {record} record found","noRecords":"No {record} records found","recordTitle":"{record} record","recordsTitle":"{record} records ({count})","policy":"Policy","selector":"Selector","priority":"Priority","exchange":"Exchange","flags":"Flags","tag":"Tag","value":"Value","noCaaRecords":"No CAA records found — any certificate authority can issue certificates","dnssecEnabled":"DNSSEC is enabled","dnssecNotDetected":"DNSSEC not detected","nameservers":"Nameservers ({count})","tabs":{"email":"Email","security":"Security","infrastructure":"Infrastructure"}},"cookies":{"unavailable":"No cookie data available","noneSet":"No cookies set by this server","detailsUnavailable":"Cookie details are not available for this scan.","cookieCount":"{count, plural, one {# cookie} other {# cookies}}","none":"None","session":"Session","daysShort":"{count}d","domain":"Domain","path":"Path","value":"Value","attributes":{"secure":"Secure","httpOnly":"HttpOnly","sameSite":"SameSite","expires":"Expires"}},"ssl":{"unavailable":"No SSL data available","validCertificate":"Valid certificate","invalidCertificate":"Invalid certificate","httpsRedirect":"HTTPS redirect","expiresInDays":"Expires in {count, plural, one {# day} other {# days}}","protocolSupport":"TLS protocol support","certificateDetails":"Certificate details","subject":"Subject","issuer":"Issuer","organization":"Organization","validFrom":"Valid from","validTo":"Valid to","daysUntilExpiry":"Days until expiry","keySize":"Key size","bitCount":"{count} bits","signatureAlgorithm":"Signature algorithm","serialNumber":"Serial number","fingerprintSha1":"Fingerprint (SHA-1)","fingerprintSha256":"Fingerprint (SHA-256)","subjectAlternativeNames":"Subject alternative names ({count})"},"headers":{"unavailable":"No header data available","missingRecommended":"Missing — recommended to add","notConfigured":"Not configured","status":"Status {status}","headersSet":"{present}/{total} headers set","redirected":"Redirected","allResponseHeaders":"All response headers ({count})"},"virusTotal":{"unavailable":"No VirusTotal data available","scanUnavailable":"VirusTotal scan not available","apiKeyHint":"Configure {variable} to enable threat intelligence scanning","threatDetected":"Threat detected","potentiallyUnsafe":"Potentially unsafe","noThreatsDetected":"No threats detected","analyzedBy":"Analyzed by {count, plural, one {# security vendor} other {# security vendors}}","malicious":"Malicious","suspicious":"Suspicious","clean":"Clean","unrated":"Unrated","maliciousCount":"{count} malicious","suspiciousCount":"{count} suspicious","cleanCount":"{count} clean","vendorCount":"{count, plural, one {# security vendor} other {# security vendors}}","maliciousDetections":"Malicious detections ({count})","suspiciousDetections":"Suspicious detections ({count})","vendor":"Vendor","result":"Result","reputationScore":"Reputation score","communityVotes":"Community votes","siteCategories":"Site categories","lastAnalyzed":"Last analyzed: {date}","viewOnVirusTotal":"View on VirusTotal"},"cors":{"unavailable":"No CORS data available","configurationUnavailable":"CORS configuration details are not available for this scan.","properlyConfigured":"CORS is properly configured","securityIssues":"CORS has security issues","allowsCrossOrigin":"CORS allows cross-origin requests","recommended":"Recommended","notSet":"Not set","corsHeaders":"CORS headers","badges":{"wildcardOrigin":"Wildcard origin (*)","reflectsOrigin":"Reflects origin","allowsCredentials":"Allows credentials","sameOriginOnly":"Same-origin only"},"headerInfo":{"allowOrigin":{"description":"Specifies which origins can access the resource. Wildcard (*) allows any origin.","recommended":"Specific origins only"},"allowCredentials":{"description":"Whether browsers should expose credentials (cookies and authorization headers) to frontend JavaScript.","recommended":"Not set or false"},"allowMethods":{"description":"HTTP methods allowed for cross-origin requests. Restrict them to necessary methods.","recommended":"GET, HEAD, OPTIONS"},"allowHeaders":{"description":"Request headers that can be used in cross-origin requests.","recommended":"Specific headers only"},"exposeHeaders":{"description":"Response headers that browser JavaScript can access.","recommended":"Only necessary headers"},"maxAge":{"description":"How long preflight results can be cached, in seconds. Higher values reduce preflight requests.","recommended":"86400 (24 hours) or more"}},"recommendations":{"title":"Security recommendations","avoidWildcard":"Avoid wildcard origins. Replace * with specific trusted domains to prevent unauthorized access.","validateReflected":"Validate reflected origins. The server reflects arbitrary origins. Implement an allowlist of trusted origins.","configurationMismatch":"Configuration mismatch: Browsers reject credentialed reads when Access-Control-Allow-Credentials: true is combined with a wildcard origin. Non-credentialed responses can still be read cross-origin.","reviewCredentials":"Review credential exposure. Ensure only trusted origins can access cookies and authorization headers through CORS."},"originTests":{"title":"Origin reflection tests","description":"We test whether the server reflects arbitrary origins. If it does, attackers may bypass CORS restrictions by sending requests from malicious domains.","testOrigin":"Test origin","reflected":"Reflected","credentials":"Credentials","notReflected":"The server does not reflect arbitrary origins — good protection against CORS attacks."},"education":{"title":"What is CORS and why does it matter?","definition":"CORS (Cross-Origin Resource Sharing) controls which websites can make requests to your server from users' browsers.","whyItMatters":"Why it matters: Without proper CORS configuration, malicious websites could steal user data, perform actions for signed-in users, or access sensitive API endpoints.","keyPoints":"Key points:","points":{"wildcard":"* allows any website to make requests — risky for APIs with sensitive data","credentialsWildcard":"Credentials plus a wildcard is especially dangerous because it can enable session hijacking","originReflection":"Origin reflection without validation is equivalent to using a wildcard","publicApis":"For public APIs without authentication, a wildcard is often acceptable"}}}},"export":{"button":"Export","pdf":"Download PDF","csv":"Export CSV","json":"Export JSON"},"share":{"scoreText":"Score: {score}/100 ({grade})","trustNoteWithLimited":"Score: {score}/100 ({grade}) · {count} categories had limited verification"},"quickWins":{"title":"Quick Wins","available":"{count} available","description":"Maximum impact fixes with minimum effort","stats":{"pointsGain":"Points gain","totalTime":"Total time","gradeChange":"Grade change"},"ariaLabel":"Quick win fixes","showMore":"Show {count} more quick wins","showLess":"Show less","card":{"quickFix":"Quick Fix:","copy":"Copy","copied":"Copied!","copyAriaLabel":"Copy fix command for {title}","effort":{"easy":"~5 min","medium":"~30 min","hard":"~2 hrs"}},"gradeArrow":"{current} → {projected}"},"fixChecklist":{"title":"Fix Checklist","description":"Track your remediation progress","progress":"{fixed} of {total} fixed","timeRemaining":"~{minutes} min remaining","download":"Download Checklist","reset":"Reset","rescan":"Verify & Rescan","allFixed":{"title":"All issues fixed!","description":"Run a rescan to verify everything is resolved."},"verify":{"command":"Verify command:","copy":"Copy","copied":"Copied!"},"groups":{"developer":"Developer","devops":"DevOps / Infra","security":"Security Team","database":"Database Admin"}},"issuesByOwner":{"title":"Issues by Owner","description":"Group findings by who needs to fix them","viewAll":"View all {count} issues","noIssues":"No issues for this owner"},"techStack":{"title":"Tech Stack","detected":"Detected Technologies","noTech":"No technologies detected","aiPlatform":"AI Platform","vibeCodePlatform":"Vibe Code Platform"},"vulnerabilityAlerts":{"title":"Vulnerability Alerts","description":"Known CVEs and security advisories","cveLabel":"CVE","cvssScore":"CVSS {score}","noAlerts":"No known vulnerabilities found"},"diffView":{"title":"Diff View","description":"Compare changes between scans","noBaseline":"No baseline scan to compare against","newIssues":"New Issues","resolvedIssues":"Resolved Issues","unchanged":"Unchanged"},"ui":{"scoreUnavailable":"Score unavailable (not assessed)","scoreUnavailableShort":"Score unavailable","notAssessed":"Not assessed","shareTitle":"Security Report for {domain}","shareLimited":"{score} · {count} categories are still in progress or lack full verification","categoryMatrix":"Category matrix","categoryCount":"{active}/{total} categories","scoreRadar":"Score radar","scanning":"{count} scanning","queued":"{count} queued","notCountedClean":"categories are not counted as clean results yet.","dismiss":"Dismiss","copy":"Copy","copied":"Copied!","learnMore":"Learn more","showAll":"Show all","showLess":"Show less","moreCount":"+{count} more","outOf100":"out of 100","humanSummary":{"criticalBody":"Your app has {critical} critical security findings and {high} high-severity findings. Start with \"{title}\". {fix} {coverage}","highBody":"Your app has {high} high-severity findings and {medium} medium findings. Start with \"{title}\". {fix} {coverage}","coveragePending":"{pending, plural, one {# deeper check is} other {# deeper checks are}} still running; {incomplete, plural, one {# other check has} other {# other checks have}} incomplete coverage.","coverageIncomplete":"{count, plural, one {# check has} other {# checks have}} incomplete coverage and {count, plural, one {is} other {are}} excluded from a clean result.","pendingHeadline":"{count, plural, one {Base report ready — # check still in progress} other {Base report ready — # checks still in progress}}","pendingBody":"No critical, high, or medium findings were confirmed by completed checks. {pending, plural, one {# deeper check is} other {# deeper checks are}} still running and {incomplete, plural, one {# check has} other {# checks have}} incomplete coverage.","partialHeadline":"{count, plural, one {Partial scan — # check did not complete} other {Partial scan — # checks did not complete}}","partialBody":"No critical, high, or medium findings were confirmed by completed checks, but {count, plural, one {# check did not complete} other {# checks did not complete}}. Re-run before treating this as a clean result."},"export":{"developerHandoff":"Developer Handoff","developerHandoffDescription":"Detailed fix guide with checklist","markdown":"Markdown (.md)","markdownDescription":"For GitHub issues","jsonData":"JSON Data","jsonDescription":"For CI/CD and automation","htmlReport":"HTML Report","htmlDescription":"Styled report for printing or PDF"},"quickWins":{"points":"+{count} pts"},"checklist":{"percentComplete":"{progress}% complete","remaining":"{time} remaining","progressAriaLabel":"Fix progress: {fixed} of {total} issues fixed","markFixed":"Mark {title} as fixed"},"sections":{"issues":"What's broken","issueCount":"{categories} categories · {findings} findings","confirmedIssues":"Confirmed security findings","confirmedIssueCount":"{findings, plural, =0 {0 confirmed} one {# confirmed in {categories} category} other {# confirmed in {categories} categories}}","startHere":"start here","holdingUp":"Holding up","cleanCount":"{count} clean","technical":"technical"},"confirmed":{"none":"Completed checks confirmed 0 security findings","completedCategories":"Verified with no findings ({count}): {categories}.","noCompletedCategories":"No scanner category has a verified result yet.","reviewChecks":"Review the exact status of {count} incomplete checks"},"coverage":{"findingsNeedVerification":"{count, plural, one {# finding needs verification} other {# findings need verification}}","baseReady":"Base report ready; deeper checks still in progress","noVerifiedIssues":"No verified issues found","unverifiedFindingsDescription":"These findings came from incomplete scanners. Review the coverage gaps before treating them as confirmed or the report as clean.","pendingDescription":"{pending} deeper scanners are queued or running and excluded from the current result. {incomplete} other scanners have incomplete coverage.","incompleteDescription":"{count} scanners are incomplete, so this report is not a clean pass yet.","noIssues":"No issues found","allPassed":"All security checks passed. Great job!","title":"Scanner status","pendingCount":"{count} pending/incomplete","incompleteCount":"{count} incomplete","statusCount":"{running} running · {queued} queued · {review} partial · {rerun} rerun","exactStatusAriaLabel":"Exact scanner status by category","groups":{"running":"Running now · {count}","queued":"Queued · {count}","review":"Partial result · {count}","rerun":"Needs another scan · {count}"},"description":"These scanners are still running or ended with partial, unverified, or unavailable coverage. They are not clean passes.","noneFullyPassed":"No categories fully passed yet. Check the fix plan above."},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info"},"kpi":{"ariaLabel":"Key metrics","grade":"Grade","score":"Score","openFindings":"Open findings","passed":"Passed","passedSubline":"checks holding up","coverage":"Coverage","coverageSubline":"of planned checks","worstCategory":"Worst category","categoryScore":"score {score}"},"triage":{"ariaLabel":"Jump to report sections","title":"Triage"},"heatmap":{"ariaLabel":"Category scores, worst first","clean":"clean","scanning":"scanning","queued":"queued","legend":{"critical":"<50 critical","warning":"50–79 warning","secure":"≥80 okay","partial":"partial","running":"scanning","queued":"queued","unavailable":"unavailable"}},"radar":{"insufficientCoverage":"Not enough scanner coverage to chart the security shape yet. Run a fresh deep scan.","ariaLabel":"Security score radar across {count} scanner categories"},"mobileBar":{"activeAndReview":"{active} active · {review} review","inProgress":"{count} in progress","toVerify":"{count} to verify","review":"{count} review","ariaLabel":"Report quick actions","scoreAriaLabel":"Security score {score} out of 100, grade {grade}","scoreUnavailable":"Security score unavailable","scoreUnavailableShort":"Score unavailable","criticalAriaLabel":"{count} critical issues — scroll to quick wins","critical":"{count} critical","fixAriaLabel":"Scroll to fix prompts","fixWithAi":"Fix with AI","share":"Share report"},"categoryCard":{"ariaLabel":"{category} security check: {status}","detailsAriaLabel":"{category} details","rechecking":"Re-checking… attempt {attempt}","otherCount":"{count} other","observationCount":"{count, plural, one {# unconfirmed observation} other {# unconfirmed observations}}","observationsTitle":"Observed by this partial check","observationsAriaLabel":"Unconfirmed observations from {category}","observationBadge":"Not confirmed","passedCount":"{count} passed","score":"score","whatWeCheck":"What we check:","whyItMatters":"Why it matters:","viewPassed":"View {count} passed checks","observedReason":"Observed reason:","attempted":"Attempted:","notEvaluated":"Not evaluated:","status":{"running":"Scanning","queued":"Queued","unavailable":"Unavailable","unverified":"Needs verification","limited":"Partially verified","secure":"Secure","warning":"Needs attention","critical":"Critical"},"notices":{"running":{"title":"Scanning now","body":"{category} is running now. It currently contributes 0 findings; this page updates automatically when it finishes."},"queued":{"title":"Waiting for scanner capacity","body":"{category} is queued. It currently contributes 0 findings and will start automatically when isolated capacity is available."},"unavailable":{"title":"Needs another scan","body":"{category} did not return a usable result. It contributes 0 findings and 0 observations; run this check again."},"unverified":{"title":"Observations not confirmed","body":"{category} returned observations without enough evidence to confirm them. Any observations shown below are excluded from findings and the fix plan."},"limited":{"title":"Partial result","body":"{category} completed only part of its checks. Any observations shown below are excluded from findings and the fix plan until confirmed."}},"gdpr":{"title":"GDPR Deep Insights","trackers":"{count} trackers","preConsent":"{count} pre-consent","undisclosed":"{count} undisclosed","nonAdequateTransfers":"{count} non-adequate transfers"}},"categoryInfo":{"headers":{"description":"Browser security response headers.","risk":"Missing controls can enable injection, framing, or data leaks."},"ssl":{"description":"TLS encryption and certificate validity.","risk":"Weak TLS can expose passwords and tokens in transit."},"dns":{"description":"DNS integrity and email authentication.","risk":"Weak DNS controls enable spoofing and domain abuse."},"exposure":{"description":"Public files, backups, maps, and debug endpoints.","risk":"Exposed artifacts can leak secrets and server internals."},"cookies":{"description":"Security flags on authentication cookies.","risk":"Weak flags can expose user sessions."},"cors":{"description":"Which origins may call the application.","risk":"Unsafe CORS can expose private API data."},"virustotal":{"description":"Configured threat and reputation sources.","risk":"A flagged domain may be blocked by browsers or networks."},"technology":{"description":"Detected frameworks, servers, and libraries.","risk":"Known versions can map to exploitable vulnerabilities."},"injection":{"description":"Observable SQL and command-injection signals.","risk":"Injection can expose databases or servers."},"xss":{"description":"Reflected and DOM script-injection signals.","risk":"XSS can steal sessions or alter the application."},"subdomains":{"description":"Publicly discoverable subdomains.","risk":"Forgotten services can become entry points."},"waf":{"description":"Web application firewall detection.","risk":"Without filtering, attacks reach the application directly."},"ports":{"description":"Internet-exposed network services.","risk":"Open admin or database ports expose infrastructure."},"gdpr":{"description":"Observable privacy, consent, and legal signals.","risk":"Missing controls can create privacy and compliance risk."},"bundleSecrets":{"description":"Secrets in deployed frontend assets.","risk":"Frontend credentials are visible to visitors."},"supabase":{"description":"Supabase exposure and RLS signals.","risk":"An exposed service role can bypass database rules."},"firebase":{"description":"Firebase database and storage rules.","risk":"Open rules can expose or modify user data."},"reputation":{"description":"Configured domain reputation sources.","risk":"A listed domain may be blocked by security products."},"clientThreats":{"description":"Third-party scripts and browser trust boundaries.","risk":"Unsafe scripts can enable session theft or supply-chain attacks."},"nuclei":{"description":"Targeted Nuclei templates on the public surface.","risk":"Matches can reveal known vulnerabilities or misconfiguration."},"zap":{"description":"Automated browser-facing application checks.","risk":"Dynamic findings can reveal weaknesses missed by configuration checks."},"medusa":{"description":"Public artifacts checked against Medusa code rules.","risk":"Bundles and source maps can expose risky code paths."},"platform":{"description":"Signals identifying AI coding platforms.","risk":"Platform patterns can guide targeted attacks."},"github":{"description":"Repository secrets, dependencies, and CI configuration.","risk":"Committed secrets persist in history and clones."}},"issueCard":{"verificationFailed":"Verification failed","evidenceCaptured":"Evidence captured during scan","observedHeaders":"Observed response headers","affectedUrls":"Affected URLs","verifying":"Verifying…","verifyNow":"Verify now (live check)","verifyHint":"Re-checks the URL in real time","stillAccessible":"Confirmed: file is still accessible","noLongerAccessible":"Fixed: file is no longer accessible","risk":"Risk:","nextSteps":"Next steps","attackerAction":"What an attacker could do","stepByStep":"Step-by-step fix","minutesDifficulty":"~{minutes} min · {difficulty}","file":"File: {file}","verifyFix":"How to verify the fix","references":"References","viewCode":"View code example"},"recovery":{"anyMoment":"any moment","inSeconds":"in {count}s","inMinutes":"in {count} min","inHours":"in {count} h","retryFailedStatus":"Retry failed ({status})","retryFailed":"Retry failed","checkingNow":"Re-checking now","scheduled":"Re-check scheduled","attempt":"Attempt {count}","description":"{category} did not return a usable result on the first attempt. We will retry until it completes or the 24-hour retry window closes.","nextAttempt":"Next attempt {time}","windowCloses":"Window closes {time}","lastCause":"Last observed cause:","whatWeCheck":"What we check:","whyItMatters":"Why it matters:","retrying":"Retrying…","retryNow":"Retry now"},"technical":{"collapseAll":"Collapse all","expandAll":"Expand all"},"techStack":{"detectedCount":"{count} technologies detected","confidence":"{confidence}% confidence","unavailable":"Technology fingerprinting was unavailable, so the detected stack may be incomplete.","partial":"Technology detection was only partially verified, so missing findings have lower confidence.","categories":{"framework":"Framework","server":"Server","cms":"CMS","cdn":"CDN","language":"Language","library":"Library","analytics":"Analytics","hosting":"Hosting","vibe-code-platform":"AI coding tool"}},"summary":{"unavailable":"{unavailable} unavailable · {pending} in progress","pending":"{count} scanning or queued","needsVerification":"{count} need verification","allCompleted":"All scanners completed","ariaLabel":"Scan summary statistics","domainAriaLabel":"Domain: {domain}","domain":"Domain","scanTimeAriaLabel":"Scan time: {seconds} seconds","scanTime":"Scan time","issuesAriaLabel":"Issues found: {count}","issues":"Issues","coverageAriaLabel":"Scanner coverage: {completed} of {total} completed","coverage":"Coverage"},"guide":{"ariaLabel":"Getting started guide","dismiss":"Dismiss guide","title":"How to read your report","steps":{"score":{"label":"Your score","description":"Your overall security grade; higher is better."},"quickWins":{"label":"Quick wins","description":"The easiest fixes with the biggest impact."},"aiFix":{"label":"Fix with AI","description":"Each issue includes a copy-ready prompt."}}},"vulnerabilities":{"cvss":"CVSS: {score}","affected":"Affected:","versions":"Versions:","fixedIn":"Fixed in:","criticalTitle":"Critical vulnerabilities detected","securityTitle":"Security vulnerabilities detected","knownTitle":"Known vulnerabilities","criticalCount":"{count} critical","highCount":"{count} high","otherCount":"{count} other","foundCount":"{count} vulnerabilities found","showLess":"Show less","showAll":"Show all {count} vulnerabilities","immediateTitle":"Immediate action required:","immediateDescription":"Update affected technologies to fixed versions to protect against known exploits."},"screenshot":{"unavailable":"Screenshot unavailable","view":"View screenshot","alt":"Screenshot of {domain}","fullSize":"View full size","fullAlt":"Full screenshot of {domain}","notCaptured":"Screenshot not captured","visit":"Visit {domain}"},"cicd":{"title":"CI/CD integration","description":"Automate security scans in your pipeline","copied":"Copied!","copy":"Copy","instructions":{"title":"Setup instructions:","threshold":"Adjust the score threshold (default: 70) as needed.","github":{"createDirectory":"Create the .github/workflows/ directory if it does not exist.","saveFile":"Save the snippet as security-scan.yml.","push":"Push it; the workflow runs on every push to main."},"gitlab":{"addFile":"Add the snippet to .gitlab-ci.yml.","createFile":"Or create the file in the repository root.","run":"The job runs in the test stage on main and merge requests."},"jenkins":{"addFile":"Add the snippet to your Jenkinsfile.","plugin":"Install the HTTP Request plugin.","fail":"The pipeline fails when the security score is below 70."}}},"fixOrder":{"level":"Level {level}","blocks":"Blocks {count}","ready":"Ready to fix","fixAfter":"Fix after: {dependencies}","mustFixFirst":"Must fix first:","enables":"Enables fixing:","howToFix":"How to fix:","title":"Fix order","readyCount":"{count} ready to start","description":"Optimal fix order based on dependencies","independent":"All issues can be fixed independently","levelCount":"Level {level}: {count} issues"},"frameworkFixes":{"copied":"Copied!","copy":"Copy","title":"Framework-specific fixes","available":"{count} available","description":"Tailored fixes for the detected stack","detected":"{framework} detected"},"diff":{"before":"Before (current)","after":"After (fixed)","copied":"Copied fix!","copy":"Copy fixed code","title":"Before/after changes","fixes":"{count} fixes","description":"See exactly what to change in your configuration"},"owner":{"verifyFix":"Verify fix:","fixCode":"Fix code:","tasks":"{owner} tasks","issues":"{count} issues","critical":"{count} critical","high":"{count} high","estimatedTime":"Est. time: {time}","points":"+{count} points","title":"Issues by team","summary":"{issues} issues across {teams} teams"},"transparency":{"confidence":"Weighted score confidence: {confidence}","scoreGapNote":"These gaps affect score confidence, not confirmed vulnerability severity.","reliabilityGapNote":"These scanner gaps affect report completeness, not the weighted score.","unavailable":"Unavailable: {categories}","partial":"Partial: {categories}","partialTitle":"Report ready with partial coverage","partialSummary":"Confirmed findings are available. Some checks still need a verified result and are not counted as passes.","pendingTitle":"Report ready — deeper checks are still running","pendingSummary":"You can use the confirmed findings now. This report updates automatically as the remaining checks finish.","notAssessedTitle":"Score pending verification","notAssessedSummary":"Not enough verified results are available for a reliable score yet. Confirmed findings remain visible.","cappedTitle":"Score reflects a confirmed high-risk finding","cappedSummary":"Coverage is complete. A confirmed finding limits the score; review the priority issue below.","reliabilityTitle":"Report ready with limited scanner coverage","reliabilitySummary":"Confirmed findings are available. Some checks need another pass before the report is complete.","coverageBadge":"{coverage}% score coverage","pendingBadge":"{count, plural, one {# check in progress} other {# checks in progress}}","details":"Scan coverage","coverageDetail":"{coverage}% of the weighted score is backed by verified checks.","pendingGroup":"{count, plural, one {# deeper check is still running.} other {# deeper checks are still running.}}","retryGroup":"{count, plural, one {Needs another pass} other {Need another pass}}: {categories}.","partialGroup":"Limited evidence: {categories}.","truthNote":"Only verified results affect the score. Incomplete checks are not treated as passes.","noPriorityFindingsSummary":"Completed checks confirmed no critical or high-severity findings. Some checks still need a verified result."}}},"share":{"button":"Share","title":"Share Report Link","copy":"Copy","copied":"Copied!","shareVia":"Share via...","accessNote":"Anyone with this link can view the report","nativeTitle":"Security Report - BoringSec","nativeText":"Check out this security scan report"}},"pricing":{"eyebrow":"Pricing","hero":{"headline":"Start with a report.","headlineSub":"Keep it protected with Care.","description":"Unlock one full audit when you need it, or put a live site on Care for weekly scans, alerts, retests, and a security badge.","subDescription":"BoringSec keeps pay-per-report pricing for one-off audits and adds a clear monitoring path for teams that need recurring coverage."},"packages":{"badges":{"mostPopular":"Most popular","bestValue":"Best value"},"perReport":"/ report","perPackage":"per package","savingsLabel":"Save {amount} vs single","features":{"detailedReport":"{count, plural, one {1 detailed report} other {# detailed reports}}","pdfEmail":"PDF + email delivery","aiFixPrompts":"AI fix prompts for Cursor / Lovable / Claude","creditsValid":"Credits valid for 365 days","moneyBack":"7-day refund on unopened reports"},"cta":"Start a scan","lowestCost":"Lowest per-report cost"},"features":{"eyebrow":"What you get","headline":"Every report includes","items":{"fullDescriptions":"Full descriptions for every finding","fixInstructions":"Step-by-step fix instructions","aiPrompts":"AI prompts for Cursor / Lovable / Claude / Bolt","severityContext":"Severity context + exploit details","compliance":"Compliance mapping (GDPR / SOC2 / PCI DSS)","pdf":"Downloadable PDF + email delivery","quickWins":"Quick-wins prioritization","templates":"Framework-specific fix templates"}},"trust":{"stripe":"Secure payment via Stripe","pdfEmail":"PDF + email delivery","instantAccess":"Instant access","moneyBack":"7-day refund on unopened reports"},"preview":{"headline":"See before you buy","description":"Every scan starts with a free preview: security score, severity counts, list of all scanner categories with issue counts, and all finding names. You only pay when you want the full breakdown with fix instructions.","cta":"Start a scan"},"faq":{"eyebrow":"FAQ","headline":"Common questions","items":{"howPricing":{"q":"How does pricing work?","a":"Each detailed security report costs {singlePrice}. Multi-report packages cut the per-report cost down to {duoPrice} (3-pack) or {triplePrice} (10-pack). Credits are valid for 365 days and can be used on any domain you scan."},"whatDoIGet":{"q":"What do I get for {price}?","a":"A complete security audit: every finding fully described with severity context, exploit details, step-by-step remediation, AI fix prompts (Cursor / Lovable / Claude / Bolt), compliance mapping (GDPR / SOC2 / PCI DSS), and a downloadable PDF emailed to you."},"isThereFree":{"q":"Is there a free tier?","a":"You can scan any domain and see a free preview - score, severity counts, list of scanner categories with issue counts, and all finding names. To unlock the full report with all fixes, purchase a single report or a multi-report package."},"canIRefund":{"q":"Can I get a refund?","a":"Your purchase is an instant digital report. If a scan fails or you're charged by mistake, we refund you in full. If you change your mind, email support@boringsec.com within 7 days for a refund, as long as you haven't unlocked the full report. Once you've unlocked and viewed the findings and fixes, the report has been delivered and used, so it's non-refundable, like any digital content you've already read."},"subscriptions":{"q":"Do you offer monthly subscriptions?","a":"Yes. Care is the recurring plan for one live site: weekly deep scans, monitoring, alerts, retests, and a live badge. Pro, Team, and Enterprise add more domains, workflow, and reporting depth."},"aiPromptsDifference":{"q":"How are AI fix prompts different from generic advice?","a":"Each fix prompt is tailored to your specific AI coding tool. Lovable users get Lovable-specific instructions, Cursor users get file-path-oriented fixes. Copy, paste, fixed."},"intruder":{"q":"How is this different from Intruder?","a":"Intruder is deeper for mature vulnerability management. BoringSec stays lighter: free preview, paid reports, AI fix prompts, Care monitoring, and founder-friendly pricing for AI-built apps and small teams."}}},"finalCta":{"headline":"Start with one scan. Keep critical sites watched.","description":"Run a free preview, unlock one full report from {price}, or start Care for weekly monitoring and alerts.","cta":"Start scanning"},"sections":{"auditPacks":{"eyebrow":"One-off audits","headline":"Buy only the reports you need.","description":"Use a single report for one domain, or buy credits for launches, client checks, and retests."},"recurring":{"eyebrow":"Monitoring plans","headline":"Care turns a one-off audit into an always-on safety net.","description":"Start with Care for one live site, then move to Pro, Team, or Enterprise as your domains, workflows, and reporting needs grow."},"compare":{"eyebrow":"Choose the right path","headline":"Reports for audits. Care for monitoring. Team plans for workflow.","description":"The product stays simple: free preview, paid report, then recurring monitoring when the risk justifies it."}},"recurring":{"badges":{"recommended":"Recommended"},"price":{"monthly":"/mo","yearly":"{price}/mo billed yearly","contact":"Contact us","fromYear":"From {price}/yr"},"domains":"domains","monitoring":"cadence","cta":{"checkout":"Start plan","sales":"Contact sales"},"featuresLabel":"Included"},"compare":{"columns":{"feature":"Feature","free":"Free","report":"Report","care":"Care","pro":"Pro","team":"Team","enterprise":"Enterprise"}},"publicModel":{"auditPacks":{"name":"{count, plural, one {# report} other {# reports}}","descriptions":{"single":"Full security report for this scan","duo":"This report + 2 future scans","triple":"This report + 9 future scans"}},"recurringPlans":{"care":{"buyer":"One live site","promise":"Weekly deep scans, lightweight monitoring, alerts, retests, and a live badge."},"pro":{"buyer":"Solo founder","promise":"Security and code audit credits, MCP, and weekly monitoring across a small portfolio."},"team":{"buyer":"Agency or small team","promise":"More domains, seats, daily monitoring, Slack/webhooks, PDF reporting, and compliance mapping."},"enterprise":{"buyer":"Larger app portfolio","promise":"Custom volume, white-label reporting, audit logs, procurement support, and dedicated onboarding."}},"cadence":{"none":"No scheduled monitoring","thirtyMinutes":"30-minute monitoring","daily":"Daily monitoring","weekly":"Weekly monitoring"},"features":{"weeklyDeepScans":"Weekly deep security scans","continuousMonitoring":"Continuous uptime, SSL, DNS, blacklist & defacement monitoring","emailSlackWebhookAlerts":"Email, Slack & webhook alerts","unlimitedRetestsBadge":"Unlimited re-tests + live security badge","scanHistoryMonths":"{count}-month scan history","domains":"Up to {count} domains","securityScansMonthly":"{count} security scans per month","seoAuditsMonthly":"{count} SEO audits per month","codeAuditsMonthly":"{count} code audits per month","githubScanning":"GitHub repository scanning","weeklyMonitoringEmail":"Weekly monitoring and email alerts","aiFixPrompts":"Fix prompts for AI coding tools","teamMembers":"{count} team members","dailyMonitoringSlack":"Daily monitoring with Slack alerts","pdfWebhooksCicd":"PDF reports, webhooks, and CI/CD integration","complianceReporting":"SOC 2, GDPR, and PCI DSS reporting","monitoringThirtyMinutes":"30-minute monitoring","auditLogsSupport":"Audit logs and security review support","ssoRoadmap":"SSO / SAML roadmap planning","whiteLabelOnboarding":"White-label reports and dedicated onboarding"},"comparison":{"rows":{"freePreview":"Free preview","fullReportUnlock":"Full report unlock","aiFixPrompts":"AI fix prompts","continuousMonitoring":"Continuous monitoring","alertChannels":"Alert channels","teamWorkflow":"Team workflow","complianceReporting":"Compliance reporting"},"values":{"included":"Included","payPerReport":"Pay per report","sampleOnly":"Sample only","notIncluded":"Not included","emailSlackWebhook":"Email, Slack, webhook","email":"Email","custom":"Custom","solo":"Solo","seats":"{count} seats","reportMapping":"Report mapping","coreFrameworks":"SOC 2, GDPR, PCI DSS","expandedFrameworks":"SOC 2, GDPR, PCI DSS, HIPAA, ISO 27001"}}}},"vibe":{"hero":{"eyebrow":"{baseModules} base modules + {backgroundEngines} background engines","headline":"Built with AI?","headlineSub":"Check if it's safe.","description":"Scan your deployed app for exposed secrets, database vulnerabilities, and auth bypass, then get the exact prompt to fix them.","worksWithLabel":"Works with","supportedPlatformsAria":"Supported AI coding platforms"},"platforms":{"lovable":"Lovable","bolt":"Bolt.new","cursor":"Cursor","v0":"v0.dev","replit":"Replit","windsurf":"Windsurf","claudeCode":"Claude Code"},"howItWorks":{"eyebrow":"Within 60 seconds","headline":"Three steps. Zero stress.","steps":{"paste":{"num":"01","title":"Paste your URL","sub":"No signup. No install. No access needed."},"scan":{"num":"02","title":"We scan everything","sub":"{baseModules} base modules inspect the URL; {backgroundEngines} verified-owner engines continue when eligible."},"fix":{"num":"03","title":"Get fix prompts","sub":"Copy-paste into your AI tool. Fixed in minutes."}}},"findings":{"headline":"Real issues","headlineSub":"we find.","description":"Actual vulnerabilities found in AI-built apps this week."},"checks":{"eyebrow":"Comprehensive Analysis","headline":"360° security analysis.","items":{"exposedApiKeys":{"title":"Exposed API Keys","stat":"15+","statLabel":"patterns detected","description":"Supabase, Firebase, Stripe, OpenAI, AWS credentials leaked in JS bundles."},"databaseSecurity":{"title":"Database Security","stat":"RLS","statLabel":"policy testing","description":"Tests Row Level Security and Firebase rules. Finds databases anyone can read."},"authHeaders":{"title":"Auth & Headers","stat":"Evidence","statLabel":"checks total","description":"Authentication and session signals, CSP, HSTS, and the applicable security-header set."},"platformDetection":{"title":"Platform Detection","stat":"10+","statLabel":"platforms","description":"Identifies which AI tool built the app. Platform-specific recommendations."},"fixPrompts":{"title":"Fix Prompts","stat":"42","statLabel":"ready prompts","description":"Copy-paste prompts for Cursor, Lovable, Bolt. Fix issues in minutes, not days."},"boringScore":{"title":"Boring Score","stat":"0-100","statLabel":"weighted score","description":"Dedicated AI-code score: secrets 40%, database 25%, auth 20%, headers 15%."}}},"statsItems":{"aiFails":{"value":"45%","label":"of AI code fails security tests"},"vibeCoders":{"value":"63%","label":"of vibe coders are non-developers"},"aiDebt":{"value":"$$1.5T","label":"projected AI tech debt by 2027"}},"findingsDemo":{"supabaseKey":{"severity":"critical","title":"Supabase service_role key exposed in frontend","sub":"Bypasses all Row Level Security. Full database access."},"openaiKey":{"severity":"critical","title":"OpenAI API key in JavaScript bundle","sub":"Anyone can use your key. Average cost of leaked key: $2,400."},"firebaseOpen":{"severity":"high","title":"Firebase RTDB open to public","sub":"All data readable and writable without authentication."},"fixPromptReady":{"severity":"fixed","title":"Fix prompt ready → \"Enable RLS on all tables...\"","sub":"Copy to Cursor or Lovable. Fix in under 5 minutes."}},"cta":{"headline":"Security costs","headlineSub":"nothing.","description":"A breach costs everything."}},"freeAudit":{"meta":{"title":"Free Website Security Preview | BoringSec","description":"Start a security scan without a credit card. See a free preview as base results arrive; deeper modules may continue, and the full report requires unlocking."},"eyebrow":"Free security preview","hero":{"headline":"Website security","headlineSub":"preview.","description":"Start a scan without a credit card. Base results normally begin appearing quickly, while deeper modules may continue in the background. Unlock the full report for every finding and fix."},"form":{"websiteLabel":"Your Website","websitePlaceholder":"example.com","emailLabel":"Business Email","emailPlaceholder":"you@yourcompany.com","emailNote":"We'll first send a confirmation link. After you confirm, we'll email the report preview when it is ready.","consentLabel":"I agree to receive an email confirmation, the report preview link, and essential service updates for this requested scan. No unrelated marketing.","submitScanning":"Scanning...","submitCta":"Start Free Preview"},"trust":{"sslEncrypted":"SSL Encrypted","sixtySeconds":"Progressive Results","checksCount":"14 Checks"},"included":{"headline":"What the scan checks","items":{"ssl":{"title":"SSL/TLS Analysis","desc":"Certificate validation and configuration"},"headers":{"title":"Security Headers","desc":"CSP, HSTS, X-Frame-Options and more"},"dns":{"title":"DNS Security","desc":"DNSSEC and email security records"},"cookies":{"title":"Cookie Security","desc":"Secure, HttpOnly, SameSite flags"},"cors":{"title":"CORS Configuration","desc":"Cross-origin resource sharing"},"vulnerability":{"title":"Vulnerability Check","desc":"Known CVEs and exposures"}}},"faq":{"headline":"Frequently Asked Questions","items":{"isItFree":{"q":"What can I view for free?","a":"Starting the scan and viewing its preview require no credit card. Unlock the full report to see every finding, detailed fix steps, AI prompts, and exports."},"howLong":{"q":"How long does the scan take?","a":"Base results normally begin appearing quickly. Deeper scanners run independently and may keep updating the report in the background; completion time depends on the site."},"reportAccess":{"q":"How do I return to my preview?","a":"We first send a one-time confirmation link. After you confirm, we email the preview when it is ready. Anonymous scan links remain available for 30 days; access to the full report requires an unlock."},"spam":{"q":"Will you spam me?","a":"No. We only send the confirmation, the preview link, and essential service updates for this requested scan. No unrelated marketing."}}},"errors":{"noDomain":"Please enter your website domain","noEmail":"Please enter your email address","noConsent":"Please agree to receive the report preview link","failed":"Failed to start scan"},"moreTools":{"headline":"More tools.","quickScan":{"label":"Quick Scan","sub":"Instant security scan without email"},"compare":{"label":"Compare","sub":"Compare security with competitors"},"leaderboard":{"label":"Leaderboard","sub":"See top secure websites"}}},"auth":{"common":{"emailLabel":"Email","passwordLabel":"Password","submitting":"Signing in...","orContinueWith":"or continue with","continueWithGoogle":"Continue with Google","continueWithGithub":"Continue with GitHub","signInWithEmail":"Sign in with magic link","sendMagicLink":"Send magic link"},"signIn":{"tab":"Sign in","title":"Welcome back","signInButton":"Sign in","forgotPassword":"Forgot password?","noAccount":"Don't have an account?","createAccount":"Create account","unavailable":"Sign-in is temporarily unavailable. Please try again shortly.","scanReadyTitle":"Your scan is ready to save","scanReadyDescription":"Create an account now and we will import the report straight into your dashboard.","selectedPlanTitle":"You picked the {plan} plan","selectedPlanDescription":"Create your account now and we will continue straight into plan activation.","adminAccessTitle":"Admin access uses your main account","adminAccessDescription":"Only allowlisted emails can open the admin panel after sign-in.","passwordPlaceholder":"At least 8 characters","termsAcceptance":"By continuing, you agree to our Terms and Privacy Policy","alternateAlreadyHaveAccount":"Already have an account?","alternateSignInAbove":"Sign in above","alternateNewToBoring":"New to BoringSec?","alternateCreateAbove":"Create your account above"},"signUp":{"tab":"Create account","title":"Create your account","signUpButton":"Create account","hasAccount":"Already have an account?","signIn":"Sign in","planLabel":"Selected plan: {plan}"},"verify":{"title":"Check your email","description":"We've sent you a magic link to sign in. Click the link in your email to continue.","note":"The link will expire in 24 hours. If you don't see the email, check your spam folder.","backToSignIn":"Back to sign in"},"forgotPassword":{"title":"Forgot your password?","description":"Enter your email and we'll send you a reset link.","sendReset":"Send reset link","sending":"Sending...","submitted":"If that email is registered, you'll receive a reset link shortly.","backToSignIn":"Back to sign in","oauthHint":"Signed up with Google or GitHub? Go back and use that provider instead.","emailSupportPrompt":"Need access right away?","emailSupportLink":"Email support"},"resetPassword":{"title":"Set new password","linkInvalid":"This password reset link is invalid or has expired.","description":"Enter your new password below.","newPassword":"New password","confirmPassword":"Confirm password","resetButton":"Reset password","saving":"Saving...","errorFallback":"Could not reset your password right now.","setupTitle":"Confirm your account","setupDescription":"Email verified. Create a password to confirm your account and finish setup.","setupLinkInvalid":"This account confirmation link is invalid or has expired.","setupLinkIncomplete":"This account confirmation link is incomplete or invalid.","setupButton":"Confirm account","setupSaving":"Confirming...","setupErrorFallback":"Could not confirm your account right now.","setupRequestNewLink":"Request a new confirmation link","newPasswordPlaceholder":"At least 8 characters","confirmPasswordPlaceholder":"Repeat your new password","linkIncomplete":"This password reset link is incomplete or invalid.","passwordHint":{"empty":"Use at least 8 characters.","tooShort":"Use at least 8 characters.","medium":"Good. A longer password is even better.","strong":"Strong length for a password."},"togglePasswordShow":"Show password","togglePasswordHide":"Hide password","toggleConfirmShow":"Show password confirmation","toggleConfirmHide":"Hide password confirmation","requestNewLink":"Request a new link"},"errors":{"Configuration":"There is a problem with the server configuration.","AccessDenied":"You do not have permission to sign in.","Verification":"The verification link may have been used or expired.","Default":"An error occurred during authentication.","OAuthSignin":"Error starting the OAuth sign in flow.","OAuthCallback":"Error handling the OAuth callback.","OAuthCreateAccount":"Could not create an account using OAuth.","EmailCreateAccount":"Could not create an account using email.","Callback":"Error in the authentication callback.","OAuthAccountNotLinked":"This email is already associated with another account.","EmailSignin":"The email could not be sent.","CredentialsSignin":"Sign in failed. Check the details you provided are correct.","SessionRequired":"Please sign in to access this page.","AdminOAuthBlocked":"Admin access now uses the main sign-in flow. Continue with your allowlisted account.","default":"An error occurred during authentication."},"error":{"title":"Authentication Error","tryAgain":"Try again","contactSupport":"contact support","persistsNote":"If the problem persists, please {contactSupport}."},"device":{"title":"Authorize Device","description":"Approve this device to use BoringSec MCP","backHome":"Back to home","client":{"headline":{"pending":"Approve BoringSec MCP","approved":"Authorization complete","denied":"Authorization denied"},"headlineDescription":{"pending":"Enter the one-time code from your MCP client. We will issue a machine API key behind the scenes, so the user never has to copy raw credentials manually.","approved":"This editor or MCP client is now linked to your BoringSec account. You can close this tab and return to your editor.","denied":"This authorization request was denied. The pending login on the editor side will fail safely."},"form":{"label":"Authorization code","placeholder":"ABCD-EFGH","checking":"Checking…","reload":"Reload","continue":"Continue","signInPrompt":"Sign in first, then approve the code from this page.","signInButton":"Sign in to approve","errorBlankCode":"Enter the authorization code shown by the MCP client.","errorNotFound":"Could not find this authorization request.","errorLoad":"Failed to load the authorization request.","successApproved":"Authorization complete. You can return to Claude Code, Cursor, or the terminal that started login."},"preview":{"titlePending":"Authorization request","titleApproved":"Authorization completed","titleDenied":"Authorization denied","descriptionPending":"Review what this client is asking for before you approve it.","descriptionApproved":"The machine credential was issued successfully. The editor should finish login automatically.","descriptionDenied":"This request has already been denied. Generate a new code in the editor if you want to try again.","clientLabel":"Client","machineLabel":"Machine","unnamedMachine":"Unnamed device","expiresAt":"Expires {date}","version":"v{version}","capabilitiesTitle":"Requested capabilities","minimumTier":"Minimum tier: {tier}","unavailableWarning":"Some requested capabilities are not included in your current plan","machineKeyNote":"We issue a dedicated machine key for this client. It can be revoked later from API keys.","denying":"Denying…","alreadyDenied":"Already denied","denyButton":"Deny device","errorDeny":"Failed to deny this device.","approving":"Approving…","alreadyApproved":"Already approved","approveButton":"Approve device","errorApprove":"Failed to approve this device.","successApprove":"Authorization complete. Return to Claude Code, Cursor, or the terminal that started login. It should finish automatically within a few seconds.","successDeny":"Authorization denied. The editor-side login will stop safely. Re-run login to generate a fresh code if needed."},"stepsApproved":{"title":"Authorization complete","step1":"1. Return to Claude Code, Cursor, or the terminal that started login.","step2Pre":"2. Wait for the terminal to print","step2Mark":"Login complete.","step2Post":"This usually takes a few seconds.","step3":"3. You can close this tab now. If the editor does not continue, focus the terminal and wait for the next poll."},"stepsDenied":{"title":"Authorization denied","step1":"1. Return to the editor or terminal that started login.","step2":"2. Start login again there to generate a fresh authorization code."}}}},"dashboard":{"nav":{"main":{"overview":"Overview","newScan":"New Scan","seoAudit":"SEO Audit","domains":"Domains","scanHistory":"Scan History","alerts":"Alerts","fixes":"Fix queue"},"team":{"sectionLabel":"Team & API","team":"Team","apiKeys":"API Keys"},"dev":{"sectionLabel":"Developer","integrations":"Integrations","mcpCockpit":"MCP Cockpit","fixTemplates":"Fix Templates"},"settings":{"sectionLabel":"Account","billing":"Billing","reports":"Reports","badge":"Badge"},"badges":{"deep":"Deep","business":"Business","pro":"Pro","new":"New"}},"sidebar":{"upgrade":{"title":"Upgrade to Pro","description":"Unlock monitoring, API access, and more scans.","cta":"Upgrade Now"},"userMenu":{"adminPanel":"Admin Panel","settings":"Settings","billing":"Billing","signOut":"Sign out"}},"mobileNav":{"toggleLabel":"Toggle navigation menu"},"notifications":{"triggerLabel":"Open notifications","title":"Notifications","unread":"{count, plural, one {# unread} other {# unread}}","emptyTitle":"No notifications","emptyDescription":"Security alerts will appear here when detected.","markRead":"Mark notification as read","timeUnknown":"Time unavailable","viewAll":"View all alerts","types":{"GENERIC":{"label":"Alert","summary":"Security status changed. Review the alert details."},"SCORE_DROP":{"label":"Score drop","summary":"The security score decreased since the previous scan."},"NEW_CRITICAL":{"label":"Critical","summary":"A new critical security issue was detected."},"SSL_EXPIRY":{"label":"SSL expiry","summary":"The TLS certificate is approaching its expiry date."},"DOMAIN_EXPIRY":{"label":"Domain expiry","summary":"The domain registration is approaching its expiry date."},"NEW_HIGH":{"label":"High severity","summary":"A new high-severity security issue was detected."},"SCAN_FAILED":{"label":"Scan failed","summary":"The latest security scan could not be completed."},"DOMAIN_VERIFIED":{"label":"Verified","summary":"Domain ownership was verified successfully."},"SCORE_IMPROVED":{"label":"Improved","summary":"The security score improved since the previous scan."},"USAGE_80_PCT":{"label":"Usage warning","summary":"Plan usage has reached 80%."},"USAGE_100_PCT":{"label":"Usage limit","summary":"The included plan usage has been fully used."},"USAGE_CAP_APPROACHING":{"label":"Cap approaching","summary":"Usage is approaching the configured cap."},"USAGE_CAP_REACHED":{"label":"Cap reached","summary":"The configured usage cap has been reached."},"NEW_VULNERABILITY":{"label":"New vulnerability","summary":"Monitoring detected a new vulnerability."},"VULNERABILITY_RESOLVED":{"label":"Resolved","summary":"A previously reported vulnerability is no longer detected."},"SITE_DOWN":{"label":"Site down","summary":"The site was unavailable during a monitoring check."},"SITE_RECOVERED":{"label":"Site recovered","summary":"The site is responding again after an outage."},"BLACKLISTED":{"label":"Blacklisted","summary":"A reputation source reports the domain as blocklisted."},"BLACKLIST_CLEARED":{"label":"Blocklist cleared","summary":"The previous blocklist listing is no longer detected."},"MALWARE_DETECTED":{"label":"Malware detected","summary":"Monitoring detected a malware or client-threat signal."},"DEFACEMENT_DETECTED":{"label":"Defacement detected","summary":"Monitoring detected an unexpected page-content change."},"DNS_CHANGED":{"label":"DNS changed","summary":"Monitored DNS records changed."},"EMERGING_THREAT":{"label":"Emerging threat","summary":"New threat intelligence may affect detected technology."}}},"impersonation":{"viewOnlyMode":"View-only mode","viewingAs":"Viewing as","loggedInAs":"(logged in as {email})","mutationsBlocked":"All changes are blocked","forceExit":"Force exit","exiting":"Exiting…","exitToAdmin":"Exit and return to admin","exitError":"Could not exit impersonation cleanly."},"header":{"searchPlaceholder":"Search...","addDomain":"Add Domain","pageTitles":{"dashboard":"Dashboard","welcomeBack":"Welcome back, {name}!","scanHistory":"Scan History","scanHistoryDesc":"View all your security scan results","domains":"Domains","domainsDesc":"Manage your monitored domains","alerts":"Alerts","alertsDesc":"Security notifications for your domains","alertSettings":"Alert Settings","alertSettingsDesc":"Configure how you receive security notifications","billing":"Billing","billingDesc":"Manage your plan and usage","yourPlan":"Your Plan","yourPlanDesc":"Full Enterprise access, free during beta","apiKeys":"API Keys","apiKeysDesc":"Manage API keys for CI, custom integrations, and advanced automation. Claude Code MCP can also use one-time device authorization instead of manual key copy.","integrations":"Integrations","badge":"Badge","badgeDesc":"Generate a security badge for your website","mcpCockpit":"MCP Cockpit","mcpCockpitDesc":"A real security work queue for vibe coders: what BoringSec found, why it matters, how to fix it, and how to prove the issue is actually gone.","teams":"Teams","teamsDesc":"Manage your teams, collaborate with others, and roll out shared governance","governance":"Governance","governanceDesc":"Central baselines, rollout posture, and drift across linked teams","reports":"Compliance Reports","reportsDesc":"Generate compliance reports for your domains","addDomain":"Add Domain","addDomainDesc":"Add a new domain to monitor","newScan":"New Scan","newScanDesc":"Paste a URL or GitHub repo and we will route it to the right scanner.","githubReview":"Code Audit","industryNews":"Industry Security News","industryNewsDesc":"Stay informed with the latest cybersecurity threats, vulnerabilities, and breaches","createTeam":"Create Team","createTeamDesc":"Set up a new team for collaboration"}},"scans":{"title":"Scan History","description":"View all your security scan results","empty":{"title":"No scans yet","description":"Run your first security scan to get started.","cta":"New Scan"},"table":{"domain":"Domain","score":"Score","grade":"Grade","status":"Status","date":"Date","actions":"Actions","boringScore":"Boring Score","issues":"Issues","duration":"Duration","scoreUnavailable":"Score unavailable","notAssessed":"Not assessed","issueCount":"{count, plural, one {# issue} other {# issues}}","noIssues":"No issues","verificationIncomplete":"Verification incomplete — rerun scan","verificationInProgress":"Verification in progress","durationSeconds":"{seconds}s","viewFixes":"View fixes"},"status":{"completed":"Completed","scanning":"Scanning","pending":"Pending","failed":"Failed"},"new":{"title":"New Scan","githubTitle":"Code Audit","description":"Paste a URL or GitHub repo and we will route it to the right scanner.","backToDashboard":"Back to Dashboard","badge":"Vibe Code Tools","launcherTitle":"One launcher for websites and repos","launcherDescription":"Website scans create an async dashboard report. Code audits run immediately and drop you into the saved scan when persistence succeeds.","websiteExample":"Website example","githubExample":"GitHub example","placeholderGithub":"owner/repo or https://github.com/owner/repo","placeholderAuto":"myapp.com or owner/repo","launching":"Launching...","startScan":"Start Scan","hint":"`app.com` runs the website scanner. `owner/repo` or a GitHub URL runs repository review.","typeGithub":"GitHub review","typeUrl":"Website scan","typeAuto":"Auto-detect","launchModesLabel":"Launch Modes","launchModesTitle":"Today's deeper functionality is exposed across scan modes, report exports, and API tools","websiteScanTitle":"Website Deep Scan","websiteScanSubtitle":"Async report in dashboard","websiteScanBody":"Best for live apps. Runs classic web checks plus deeper layers like technology fingerprinting, XSS, injection, open ports, WAF, GDPR, subdomains, vibe-platform detection, and richer report trust signals.","githubScanTitle":"Code Audit","githubScanSubtitle":"Repo audit with persistence","githubScanBody":"Best for repositories. Surfaces auth, secrets, unsafe patterns, reliability/load review signals, rate limiting gaps, webhook hardening gaps, TypeScript strictness, dependency hygiene, test coverage, and dead-code signals.","apiScanTitle":"API Code & Project Scan","apiScanSubtitle":"CLI, CI/CD, editor workflows","apiScanBody":"Use `/api/v1/scan/code` and `/api/v1/scan/project` to scan raw files, generated patches, or whole project payloads when you want security checks embedded directly into coding workflows.","templatesScanTitle":"Fix Templates & Exports","templatesScanSubtitle":"Prompt-ready remediation","templatesScanBody":"After a scan, export developer handoff, JSON, and HTML report artifacts, or jump into fix templates for Cursor, Claude Code, Windsurf, Lovable, and other AI-assisted remediation flows.","freshScanHint":"If an older report doesn't show these deeper sections yet, run a fresh scan. New reports carry the expanded scanner categories, trust notes, exports, and technical detail payloads.","runningGithub":"Running code audit","creatingDashboard":"Creating dashboard scan","runningGithubDesc":"We are pulling the repository tree, running code checks, and saving the report.","creatingDashboardDesc":"We are creating the scan job and will redirect you as soon as the dashboard report is ready.","connectGithub":"Connect GitHub","connectGithubNote":"We request repo access only for code audits of private repositories.","errorUnknownInput":"Enter a website URL like `app.com` or a GitHub repo like `owner/repo`.","errorGithubUnavailable":"GitHub repository access is unavailable right now.","errorGeneric":"Scan failed. Please try again.","errorUpgradeRequired":"Upgrade required","errorNoReport":"Code audit completed, but no report was returned.","kindToggle":{"security":"Security / Code","seo":"SEO Audit","newBadge":"NEW"},"seoCard":{"title":"SEO Deep Audit","subtitle":"100-page crawl + AI-search readiness","body":"Crawls up to 100 pages, checks GPTBot/Claude/Perplexity accessibility, llms.txt, schema.org, hreflang, and Core Web Vitals. Quota by tier: PRO 10/mo · BUSINESS 50/mo · ENTERPRISE 250/mo."}},"progress":{"title":"Scanning {hostname}","description":"Analyzing security configuration...","progress":"Progress","stages":{"init":"Initializing scan","dns":"Checking DNS security","ssl":"Analyzing SSL/TLS","headers":"Checking HTTP headers","cookies":"Analyzing cookies","exposure":"Scanning for exposures","cors":"Testing CORS policies","finalize":"Finalizing report","tech":"Tech checks","injection":"Injection tests","repo":"Repository scan","secrets":"Secret scan","deps":"Dependencies","tests":"Test coverage","ci":"CI checks","crypto":"Crypto checks","session":"Session handling","crawl":"Crawling","meta":"Meta tags","content":"Content","structure":"Structure","performance":"Performance","ai-ready":"AI readiness","links":"Links","robots":"Robots & sitemap"},"complete":{"title":"Scan Complete!","scoreLabel":"Security score: {score} ({grade})","scoreUnavailable":"Score withheld until every scanner has a verified result.","loadingResults":"Loading results..."},"failed":{"title":"Scan Failed","defaultError":"An unexpected error occurred during the scan.","goBack":"Go back","tryAgain":"Try Again"},"timeout":{"title":"Scan Taking Longer Than Expected","description":"The scan is taking longer than usual. This could be due to slow target server response or temporary processing issues.","keepWaiting":"Keep Waiting","startNewScan":"Start New Scan"},"slow":{"title":"This is taking longer than usual...","description":"The target website may be slow to respond. You can keep waiting or start a new scan."},"elapsed":"Elapsed time: {time}","queued":"{count, plural, one {Queued behind # pending scan} other {Queued behind # pending scans}}.","estimatedWait":"Estimated wait: ~{seconds}s","stageHint":"This may take a few seconds..."}},"domains":{"title":"Domains","description":"Manage your monitored domains","empty":{"title":"No domains yet","description":"Add your first domain to start monitoring security.","cta":"Add Domain"},"delete":{"confirm":"Are you sure you want to delete this domain?","deleting":"Deleting...","delete":"Delete"},"runScan":"Run Scan","scanning":"Scanning...","verificationSection":{"title":"Domain Verification","verify":"Verify Domain","description":"Verify ownership to unlock monitoring and team features","verifiedTitle":"Domain Verified","verifiedDesc":"{hostname} has been verified. All features are now unlocked.","failedTitle":"Verification Failed","failedDesc":"We couldn't find the TXT record. Please check your DNS configuration and try again.","instructions":"To verify ownership of {hostname}, add the following TXT record to your DNS configuration:","typeLabel":"Type:","hostLabel":"Host:","valueLabel":"Value:","generateToken":"Generate Token","copyToken":"Copy verification token","copied":"Verification token copied","noteLabel":"Note:","noteDnsPropagation":"DNS changes can take up to 48 hours to propagate.","noteCloudflare":"If you're using Cloudflare, Vercel, or similar services, changes typically propagate within a few minutes.","verifyNow":"Verify Now","verifying":"Verifying...","errorNetwork":"Network error. Please try again.","errorLoadToken":"Failed to load the verification token. Please try again.","errorGenerateToken":"Failed to generate the verification token. Please try again.","errorCopy":"Could not copy the verification token.","errorVerification":"Verification failed. Check the DNS record and try again.","success":"Domain ownership verified."},"detail":{"monitoringActiveBadge":"Monitoring Active","continuousMonitoringBadge":"Continuous Monitoring","scoreUnavailable":"Score unavailable","scoreNotAssessed":"Not assessed","scoreProcessing":"Security check is finishing","scoreProcessingDescription":"{count} advanced checks are still running. Verified findings are available now.","scoreIncomplete":"Final score not available","scoreIncompleteDescription":"Some checks could not finish. We show verified findings and never guess a grade.","scoreFailed":"Scan needs attention","scoreFailedDescription":"This scan did not finish. Start a new scan to get a complete result.","scanStatusProcessing":"Finishing","scanStatusIncomplete":"Partial results","scanStatusFailed":"Retry needed","scanEnginesRunning":"{scanners} still running","scanVerifiedFindings":"Verified findings available","statCurrentScore":"Current Score","statTotalScans":"Total Scans","statActiveAlerts":"Active Alerts","statLastScan":"Last Scan","statNever":"Never","tabScanHistory":"Scan History","tabAttackSurface":"Attack Surface","tabVerification":"Verification","tabSettings":"Settings","scansCardTitle":"Recent Scans","scansCardDescription":"View your domain's security scan history","scansEmpty":"No scans yet","scanBadgeLatest":"Latest","scanIssueCritical":"{count} critical","scanIssueMedium":"{count} medium","scanNoIssues":"No issues found","scanViewReport":"View Report","continuousMonitoringTitle":"Continuous Monitoring","continuousMonitoringDescription":"Automated uptime, SSL, blacklist, and tamper checks with email alerts","monitoringTimelineTitle":"Monitoring timeline","monitoringTimelineDescription":"Latest probe results grouped by check family.","seoCardTitle":"SEO Monitoring","seoCardDescription":"Schedule monthly SEO audits and receive email reports","seoUpgradeMessage":"Monthly SEO monitoring is available on Pro and above","seoUpgradeCta":"Upgrade to unlock","settingsCardTitle":"Domain Settings","settingsCardDescription":"Configure monitoring and notification preferences","automaticMonitoringLabel":"Automatic Monitoring","automaticMonitoringDesc":"Automatically scan this domain on a schedule","monitoringEnabled":"Enabled","monitoringDisabled":"Disabled","deleteDomainLabel":"Delete Domain","deleteDomainDesc":"Permanently remove this domain and all its data","verificationPending":"Pending Verification","verificationFailed":"Verification Failed"},"new":{"backToDomains":"Back to Domains","cardTitle":"Add New Domain","cardDescription":"Enter the URL of the website you want to monitor","urlLabel":"Website URL","urlPlaceholder":"example.com or https://example.com","urlHint":"Enter a domain name or full URL. We'll automatically add HTTPS if needed.","addingButton":"Adding...","addButton":"Add Domain","errorFallback":"An error occurred","errors":{"invalidUrl":"Enter a valid public website URL.","sessionExpired":"Your session has expired. Sign in again and retry.","limitReached":"Your current plan has reached its domain limit.","rateLimited":"Too many domain requests. Please wait and try again."},"nextStepsTitle":"What happens next?","step1Title":"Domain Added","step1Desc":"Your domain will be added to your account.","step2Title":"Verification (Optional)","step2Desc":"Verify domain ownership via DNS TXT record to unlock all features.","step3Title":"Run Security Scan","step3Desc":"Scan your domain to get a comprehensive security report."},"leaderboardToggle":{"show":"Show on Leaderboard","hide":"Hide from Leaderboard"},"actions":{"scan":{"run":"Run scan","starting":"Starting…","error":"Could not start the scan. Please try again.","rateLimited":"Too many scan requests. Please wait and try again."},"delete":{"title":"Delete domain","confirm":"Are you sure you want to delete {hostname}?","warning":"This cannot be undone. All scans, alerts, and data for this domain will be permanently deleted.","cancel":"Cancel","deleting":"Deleting…","delete":"Delete","error":"Could not delete the domain. Please try again.","notFound":"This domain no longer exists or you no longer have access."},"leaderboard":{"label":"Show on leaderboard","description":"Display the verified security score on the public leaderboard.","error":"Could not save the leaderboard setting. Please try again."},"monitoring":{"label":"Continuous monitoring","description":"Uptime, SSL, blacklist, and tamper checks with email alerts.","upgradeHint":"Care is required to enable continuous monitoring.","upgradeCta":"Upgrade to Care","error":"Could not save the monitoring setting. Please try again."},"recheck":{"button":"Re-check now","error":"Could not start the re-check. Please try again.","rateLimited":"Too many re-check requests. Please wait and try again."}},"attackSurface":{"scope":"Smart Recon Lite is a focused inventory for your web app and domain. It is not a replacement for enterprise-wide asset management across every internal network and cloud account.","summary":{"new":"New assets","risky":"Risky assets","missing":"Missing/resolved","verify":"Needs verification"},"assetTypes":{"SUBDOMAIN":"Subdomain","SERVICE":"Service","LOGIN":"Login","ADMIN":"Admin","API_DOCS":"API docs","TECHNOLOGY":"Technology","REPOSITORY_HINT":"Repository hint"},"riskLevels":{"INFO":"Info","LOW":"Low","MEDIUM":"Medium","HIGH":"High","CRITICAL":"Critical"},"missingNow":"Missing now","sourceConfidence":"Source: {source} · Confidence: {confidence}%","empty":{"title":"No attack-surface inventory yet.","description":"Run a new deep security scan to populate discovered technologies, paths, services, and subdomains."},"riskyTitle":"Risky assets","noRisky":"No risky assets were detected in the latest inventory.","recentTitle":"Recent changes","noRecent":"No new or missing assets in the current scan window."},"monitoring":{"off":{"badge":"Care monitoring is off","title":"Enable Care monitoring to build a live status timeline.","description":"Care runs uptime, SSL, DNS, blacklist, client-threat, defacement, and recurring deep-scan checks for this domain.","cta":"Upgrade to Care"},"noChecks":"No checks yet","daysRemaining":"{count, plural, one {# day remaining} other {# days remaining}}","statuses":{"noData":"No data","ok":"OK","warning":"Warning","critical":"Critical","failed":"Failed"},"reasons":{"noChecks":"No monitor checks have run yet","clear":"All latest monitor checks are clear"},"states":{"ok":"OK","warning":"Warning","critical":"Critical","unknown":"Unknown"},"currentState":"Current monitor state","metrics":{"uptime":"Uptime","ssl":"SSL","blacklist":"Blacklist","dns":"DNS","clientThreat":"Client threat","defacement":"Defacement"},"uptime24h":"{percent}% over 24h","responseTime":"{milliseconds} ms","clean":"Clean","findings":"{count, plural, one {# finding} other {# findings}}","checkTypes":{"UPTIME":"Uptime","SSL":"SSL","DNS":"DNS","BLACKLIST":"Blacklist","CLIENT_THREAT":"Client threat","DEFACEMENT":"Defacement"},"timeline":{"emptyTitle":"No monitoring timeline yet","emptyDescription":"Enable Care monitoring and run the first check to populate uptime, SSL, DNS, blacklist, client-threat, and defacement history.","responseTime":"{milliseconds} ms","httpStatus":"HTTP {status}","daysRemaining":"{count, plural, one {# day remaining} other {# days remaining}}","findings":"{count, plural, one {# finding} other {# findings}}","noFindingsPayload":"No findings payload","probeCompleted":"Probe completed"}},"seoMonitoring":{"monthlyAutoAudit":"Monthly auto-audit","monthlyAutoAuditDesc":"Run an SEO audit automatically on the 1st of each month","emailReportTo":"Email report to","lastAudit":"Last audit","nextScheduledAudit":"Next scheduled audit","runAuditNow":"Run audit now","viewLatestReport":"View latest report","saved":"Saved","never":"Never"},"authenticatedScan":{"title":"Authenticated scanning","description":"The credential is restricted to the verified host {hostname}. ZAP may send it to same-host paths discovered by its spider during this scan.","loading":"Loading encrypted profile status…","unverified":{"description":"Verify ownership before adding access to protected application paths.","restriction":"Authentication credentials are accepted only after ownership of the domain has been verified."},"unavailable":{"description":"Protected-path scanning is not available on this runtime.","provisioning":"No credential was accepted. An operator must provision the server-only encryption key through Infisical before this feature can be used."},"evidence":{"title":"Evidence, never assumptions","description":"The current single-credential flow improves passive coverage for session-accessible pages. It does not assess MFA, account enumeration, cross-account IDOR or other two-identity authorization, transaction-specific CSRF, or JWT lifecycle. Those require dedicated multi-identity or manual testing; missing evidence never becomes a clean pass."},"profile":{"title":"Encrypted profile {status}","active":"active","paused":"paused","summary":"{credentialType} · protected path {path} · auto-delete {date}","lastTest":"Last test: {result} · HTTP {httpStatus}","ok":"OK","testStatuses":{"reachable":"Reachable","verified":"Verified","failed":"Failed","invalid":"Invalid","notRun":"Not run","unknown":"Unknown"}},"credentialTypes":{"bearer":"Bearer token","header":"Custom header","cookie":"Session cookie","form":"Bounded login form"},"fields":{"accessMethod":"Access method","testPath":"Protected test path","testPathHelp":"This path only proves that the credential changes access; it is not a crawl allowlist. Without access it must return 401/403, or a form flow may redirect to its login path.","headerName":"Header name","loginPath":"Login path","usernameField":"Username field name","username":"Username","passwordField":"Password field name","password":"Password","credentialValue":"Credential value","replacePlaceholder":"Enter a new value to replace the encrypted credential","encryptedPlaceholder":"Encrypted before storage","secretPrivacy":"The value is never returned by the API or written to reports, jobs, diagnostics, or audit metadata.","retention":"Credential retention","retentionDays":"{count, plural, one {# day} other {# days}}"},"formBoundary":{"title":"Form login boundary","description":"HTTPS, same origin, one URL-encoded POST, no redirects, extra fields, or custom scripts. The login path only establishes a session and does not restrict where ZAP crawls."},"authorizationConsent":"I am authorized to provide this credential and allow ZAP to send it across same-host paths discovered on this verified origin. The test path validates access only; it does not restrict crawling. I can revoke the credential immediately with “Delete now”.","actions":{"pause":"Pause","enable":"Enable","test":"Test","deleteNow":"Delete now","cancel":"Cancel","deleteCredential":"Delete credential","replaceAndVerify":"Replace and verify credential","verifyAndEncrypt":"Verify and encrypt credential"},"deleteDialog":{"title":"Delete encrypted scan credential?","description":"Future deep scans will immediately return to unauthenticated coverage. This action cannot be undone."},"notices":{"saved":"Protected access verified. The credential is encrypted and ready for deep scans.","connectionVerified":"Connection verified (HTTP {status}).","enabled":"Authenticated deep scanning enabled.","paused":"Authenticated deep scanning paused; the encrypted value remains until expiry or deletion.","deleted":"Encrypted credential deleted."},"errors":{"unauthorized":"Your session is no longer authorized. Sign in again and retry.","invalidDomain":"This domain request is invalid.","domainNotFound":"This domain could not be found.","domainNotVerified":"Verify domain ownership before configuring authenticated scanning.","validationFailed":"Check the credential fields and authorization consent, then retry.","credentialTestFailed":"The credential could not reach the protected test path.","profileNotFound":"No authenticated scan profile was found for this domain.","profileDisabled":"Enable the authenticated scan profile before testing it.","profileExpired":"The authenticated scan profile expired and was securely deleted.","authorizationRequired":"Accept the authorization consent again before testing.","serviceUnavailable":"Authenticated scan settings are temporarily unavailable. No credential was exposed.","loadFailed":"Could not load authenticated scan settings.","saveFailed":"The credential could not be verified or saved.","testFailed":"The protected connection test failed safely.","updateFailed":"Could not update the encrypted profile.","deleteFailed":"Could not delete the encrypted credential."}},"table":{"verified":"Verified","pending":"Pending","failed":"Failed","noScore":"No score","status":"Status","lastScore":"Last Score","scans":"Scans","lastScan":"Last Scan","viewDetails":"View Details","never":"Never","neverScanned":"Never scanned"},"list":{"title":"Your Domains","manage":"Manage","lastScan":"Last scan {time}"}},"stats":{"domains":"Domains","scansUsed":"Scans Used","seoAudits":"SEO Audits","currentPlan":"Current Plan","ofXScans":"of {limit} scans used","unlimited":"Unlimited","ofXThisMonth":"of {limit} this month","scanLimitReached":"Scan limit reached","upgradeToRun":"Upgrade to run"},"quickScan":{"title":"Quick Scan","placeholder":"Enter a website or owner/repo...","scan":"Scan","notScannedYet":"Not scanned yet","rescan":"Re-scan"},"recentScans":{"title":"Recent Scans","viewAll":"View All","noScansYet":"No scans yet"},"alerts":{"title":"Alerts","description":"Security notifications for your domains","markingAll":"Marking...","markAllCount":"Mark all ({count})","filters":{"label":"Filters:","statusAll":"All alerts","statusUnread":"Unread only","typeAll":"All types","typeScoreDrop":"Score Drop","typeCritical":"Critical Issue","typeHighSeverity":"High Severity","typeSslExpiry":"SSL Expiry","typeDomainExpiry":"Domain Expiry","typeScanFailed":"Scan Failed","typeDomainVerified":"Domain Verified","typeScoreImproved":"Score Improved"},"list":{"title":"Notifications","description":"Recent security alerts from your monitored domains","unreadBadge":"{count} new","viewScanDetails":"View scan details","markAsRead":"Mark as read","timeJustNow":"Just now","timeMinutes":"{count}m ago","timeHours":"{count}h ago","timeDays":"{count}d ago","openFixQueue":"Open fix queue"},"alertTypes":{"SCORE_DROP":"Score Drop","NEW_CRITICAL":"Critical Issue","SSL_EXPIRY":"SSL Expiry","DOMAIN_EXPIRY":"Domain Expiry","NEW_HIGH":"High Severity","SCAN_FAILED":"Scan Failed","DOMAIN_VERIFIED":"Domain Verified","SCORE_IMPROVED":"Score Improved","USAGE_80_PCT":"Usage Warning","USAGE_100_PCT":"Usage Limit","USAGE_CAP_APPROACHING":"Cap Approaching","USAGE_CAP_REACHED":"Cap Reached","default":"Alert","EMERGING_THREAT":"Emerging threat"},"news":{"title":"Industry Security News","description":"Stay informed with the latest cybersecurity threats, vulnerabilities, and breaches"},"settings":{"title":"Alert Settings","description":"Configure how you receive security notifications","loadError":"Failed to load settings","saving":"Saving...","saved":"Saved!","saveSettings":"Save Settings","email":{"title":"Email Notifications","description":"Receive security alerts via email","enableLabel":"Enable email notifications"},"webhook":{"title":"Webhook Notifications","description":"Send alerts to a custom webhook URL","enableLabel":"Enable webhook notifications","urlLabel":"Webhook URL","urlPlaceholder":"https://your-server.com/webhook","urlHint":"We'll send a POST request with JSON payload to this URL"},"slack":{"title":"Slack Integration","description":"Send alerts to a Slack channel","enableLabel":"Enable Slack notifications","webhookLabel":"Slack Webhook URL","webhookPlaceholder":"https://hooks.slack.com/services/...","webhookHint":"Create an incoming webhook in your Slack workspace settings"},"thresholds":{"title":"Alert Thresholds","description":"Configure when you want to be alerted","scoreDropLabel":"Score drop threshold","scoreDropPoints":"{count} points","scoreDropHint":"Alert when security score drops by {count} points or more"}},"empty":{"title":"No alerts","description":"You're all caught up. No new security alerts."}},"billing":{"title":"Billing","description":"Manage your plan and usage","faq":{"title":"Frequently Asked Questions","description":"Common questions about billing and subscriptions","items":{"changePlan":{"q":"Can I change my plan at any time?","a":"Yes. You can manage upgrades, downgrades, and billing details from the Stripe billing portal. Downgrades typically take effect at the start of the next billing cycle."},"exceedLimit":{"q":"What happens if I exceed my scan limit?","a":"When you reach your monthly scan limit, you'll still be able to view your existing scan results and reports. To run new scans, you can either wait until your limit resets at the start of the next billing cycle, or upgrade to a higher plan with more scans."},"refunds":{"q":"Do you offer refunds?","a":"If you were billed unexpectedly or need help with a charge, contact support and we'll review the case with you directly."},"paymentMethods":{"q":"What payment methods do you accept?","a":"We accept major credit cards through Stripe. If you need a custom Enterprise billing arrangement, contact support before purchasing."},"teamBilling":{"q":"How does team billing work?","a":"Business includes up to 5 team members and Enterprise includes unlimited team members. Everyone on the team shares the same domain limits, scan capacity, and billing owner."},"compliance":{"q":"What's included in compliance reports?","a":"Business includes PCI DSS 4, GDPR, and SOC 2 coverage. Enterprise adds HIPAA and ISO 27001. Reports map findings to the frameworks available on your plan."}}},"pricingCards":{"title":"Upgrade Your Plan","managePortal":"Manage in Stripe Portal"},"comparison":{"title":"Feature Comparison","featureColumn":"Feature","currentLabel":"Current"},"currentPlan":{"title":"Your Plan"},"extraUsage":{"title":"Extra Usage","enableButton":"Enable Extra Usage","manageCap":"Manage Cap"},"paymentInfo":{"title":"Payment Information"},"usageHistory":{"title":"Usage History"},"usageStats":{"title":"Usage"},"careActivation":{"activeTitle":"Care is active for {hostname}","activeDescription":"Weekly deep scans, continuous checks, and alerts are now enabled for this exact site.","pendingTitle":"Checking Care activation","pendingDescription":"We are checking whether weekly scans and continuous monitoring are active for {hostname}. This page updates automatically only after the signed Stripe webhook confirms the exact enrollment.","delayedTitle":"Care activation is still processing","delayedDescription":"Activation for {hostname} is taking longer than usual. We will keep checking automatically and will only confirm protection after the exact enrollment is verified.","unverifiedTitle":"Care activation is not yet verified","unverifiedDescription":"We cannot confirm protection for {hostname} from this session yet. No active monitoring is being claimed while verification is incomplete.","contextUnverifiedTitle":"Care activation is not yet verified","contextUnverifiedDescription":"The checkout return cannot yet be matched to the exact paid report and site. We are not claiming that monitoring is active."},"portalButton":"Open Billing Portal"},"team":{"title":"Teams","description":"Manage your teams, collaborate with others, and roll out shared governance","governance":"Governance","createTeam":"Create Team","upgradeForTeams":"Upgrade for Teams","roles":{"owner":"Owner","admin":"Admin","member":"Member","viewer":"Viewer"},"list":{"lockedTitle":"New team creation is locked on your current plan.","lockedDescription":"Upgrade to Business or Enterprise to create new teams and manage collaborators.","upgrade":"Upgrade","noTeamsTitle":"No teams yet","noTeamsDescription":"Create a team to collaborate with others on security monitoring","createFirst":"Create Your First Team","lockedEmptyTitle":"Teams unlock on Business","lockedEmptyDescription":"Free and Pro workspaces can work solo. Upgrade when you need shared domains, collaboration, and delegated access.","upgradeForTeams":"Upgrade for Teams","domainCount":"{count, plural, one {# domain} other {# domains}}","moreMembersCount":"+{count} more","memberAvatarAlt":"{name}'s avatar","memberAvatarFallback":"Team member avatar","viewTeam":"View Team"},"invite":{"title":"Invite Member","button":"Invite","sending":"Sending...","pageValidating":"Validating Invitation...","pageValid":"Team Invitation","pageAccepting":"Joining Team...","pageAccepted":"Welcome to the Team!","pageError":"Invitation Error","descValidating":"Please wait while we validate your invitation","descInvited":"You've been invited to join {teamName} as a {role}","descAccepting":"Adding you to the team...","descAccepted":"Redirecting you to the team page...","teamLabel":"Team: {name}","accept":"Accept Invitation","decline":"Decline","backToTeams":"Back to Teams","errorInvalidLink":"Invalid invitation link","errorInvalid":"Invalid invitation","errorValidate":"Failed to validate invitation","errorAccept":"Failed to accept invitation"},"detail":{"settings":"Settings","orgPolicy":"Org Policy","statsMembers":"Team Members","statsDomains":"Domains","statsSecure":"Secure Domains","tabMembers":"Members","tabDomains":"Domains","tabInvitations":"Invitations","membersTitle":"Team Members","membersHeaderMember":"Member","membersHeaderRole":"Role","membersHeaderJoined":"Joined","roleOwnerBadge":"Owner","ownerAvatarAlt":"{name}'s avatar","ownerAvatarFallback":"Team owner avatar","memberAvatarAlt":"{name}'s avatar","memberAvatarFallback":"Team member avatar","domainsTitle":"Team Domains","addDomain":"Add Domain","domainsEmpty":"No domains yet","domainsEmptyHint":"Add a domain to start monitoring","domainsNever":"Never","domainsHeaderDomain":"Domain","domainsHeaderScore":"Score","domainsHeaderLastScan":"Last Scan","invitationsTitle":"Pending Invitations","invitationsEmpty":"No pending invitations","invitationsEmptyHint":"Invite team members to collaborate","invitationsHeaderEmail":"Email","invitationsHeaderRole":"Role","invitationsHeaderExpires":"Expires","revokeInvitation":"Revoke"},"actions":{"remove":"Remove","changeRole":"Change Role","confirm":"Are you sure?"},"create":{"title":"Create Team","description":"Set up a new team for collaboration","cta":"Create Team","detailsTitle":"Team Details","detailsDescription":"Choose a name and URL slug for your team","nameLabel":"Team Name","namePlaceholder":"Acme Security Team","slugLabel":"Team URL","slugPlaceholder":"acme-security","slugHint":"This will be your team's unique identifier","errorRequired":"Name and slug are required","errorFailed":"Failed to create team","errorCheckout":"Failed to start checkout","creating":"Creating...","upgradeRequired":"Upgrade Required","upgradeBody":"Teams are available on Business and Enterprise plans. Upgrade now to create teams and collaborate with your colleagues.","billingMonthly":"Monthly","billingYearly":"Yearly","billingYearlySave":"Save 17%","perMonth":"/mo","recommended":"Recommended","teamMembersUnlimited":"Unlimited team members","teamMembersLimit":"Up to {limit} team members","yearlySave":"Save {price}/year","processing":"Processing...","upgradeTo":"Upgrade to {name}","createDisabled":"Create Team"},"settings":{"title":"Team Settings","governance":"Governance Settings","governanceTitle":"Team Security Governance","backToTeam":"Back to Team"}},"apiKeys":{"title":"API Keys","description":"Manage API keys for CI, custom integrations, and advanced automation.","create":{"title":"Create API Key","createdTitle":"API Key Created","createdDescription":"Copy your API key now. You won't be able to see it again.","deviceDescription":"Create a new API key for programmatic access. For Claude Code or other local editors, prefer device login via `npx -y @boringsec/claude-code login` so the user never handles raw secrets manually.","nameLabel":"Key Name","namePlaceholder":"e.g., CI/CD Pipeline","permissionsLabel":"Permissions","saveKey":"Save your key","saveKeyNote":"This is the only time you'll see your API key. Copy it now.","copied":"Copied to clipboard!","done":"Done","cancel":"Cancel","creating":"Creating...","createButton":"Create Key","error":"Could not create API key"},"table":{"title":"Your API Keys","description":"Active non-device API keys for CI, scripts, and custom integrations","noKeys":"No manual API keys","noCiDescription":"Create an API key to start using CI or custom automation","lockedTitle":"API keys are locked on Free","lockedDescription":"Upgrade to Pro to create API keys for CI, integrations, and programmatic scans.","upgradeCta":"Upgrade to Pro","createCta":"Create API Key","headers":{"name":"Name","key":"Key","scopes":"Scopes","created":"Created","lastUsed":"Last Used","expires":"Expires","actions":"Actions"}},"mcpDevices":{"title":"Authorized MCP Devices","description":"Local Claude Code or editor installations authorized through one-time device login","noDevices":"No authorized MCP devices","noDevicesHint":"Run npx -y @boringsec/claude-code login on a local machine to authorize it here.","rotateTip":"To renew a device without manually copying secrets, run npx -y @boringsec/claude-code rotate on that machine.","revokeDevice":"Revoke device","authorizedDeviceFallback":"authorized device","headers":{"client":"Client","machine":"Machine","posture":"Posture","scopes":"Scopes","lastUsed":"Last Used","expires":"Expires","created":"Created"},"authorizedFrom":"Authorized: {location}","lastSeen":"Last seen: {location}"},"quickStart":{"title":"Quick Start","description":"Use the API to integrate security scanning into your workflow","example":"Example API request:","docsLabel":"API documentation","docsCta":"for full details."},"upsell":{"title":"API access unlocks on Pro","description":"Free workspaces can browse the API docs, but creating and rotating API keys requires Pro or higher.","body":"Upgrade to automate scans, usage checks, and CI flows without hitting a dead end.","unlockCta":"Unlock API Keys","upgradeCta":"Upgrade to Pro"},"revoke":{"deviceTitle":"Revoke MCP device","keyTitle":"Revoke API key","confirmRevoke":"Revoke","deviceBody":"That device will lose access immediately and the local MCP login will stop working.","keyBody":"Any integrations using this key will stop working immediately.","cancel":"Cancel","revoking":"Revoking...","revokeDevice":"Revoke device","revokeKey":"Revoke key"},"status":{"active":"Active","expired":"Expired","expiringSoon":"Expiring Soon"},"scopes":{"scanRead":"Read scans","scanReadDesc":"View scan results, usage, fix suggestions, and AI recommendations","scanWrite":"Run scans","scanWriteDesc":"Trigger URL, repository, code, and project scans","domainRead":"Read domains","domainReadDesc":"View domain information and linked scan context","domainWrite":"Manage domains","domainWriteDesc":"Add, verify, and update monitored domains","scanReadFull":"Full scan data","scanReadFullDesc":"Access raw scan metadata and expanded findings (Business+)","monitoringRead":"Read monitoring","monitoringReadDesc":"View monitoring schedules and current monitoring state","monitoringWrite":"Manage monitoring","monitoringWriteDesc":"Create or update monitoring configuration","webhookRead":"Read webhooks","webhookReadDesc":"Inspect configured webhook destinations (Business+)","webhookWrite":"Manage webhooks","webhookWriteDesc":"Create, rotate, and delete webhook destinations (Business+)","complianceRead":"Compliance reports","complianceReadDesc":"Generate PCI DSS, GDPR, SOC 2, HIPAA, and ISO 27001 reports (Business+)","historyRead":"Historical trends","historyReadDesc":"Read historical scan trends and long-term security changes (Business+)","templateRead":"Read fix templates","templateReadDesc":"Load built-in and community remediation templates","templateWrite":"Publish templates","templateWriteDesc":"Submit or manage fix templates for your organization","governanceRead":"Read governance","governanceReadDesc":"Read managed team and organization governance policy settings (Business+)","governanceWrite":"Manage governance","governanceWriteDesc":"Submit waiver syncs and governance policy actions (Business+)","outreachRead":"Read outreach","outreachReadDesc":"Read report outreach records and email delivery status (Business+)","outreachWrite":"Manage outreach","outreachWriteDesc":"Create and update report outreach records and scans (Business+)","outreachSend":"Send outreach","outreachSendDesc":"Send and retry preview report outreach emails (Business+)"},"actions":{"revoke":"Revoke","copy":"Copy"}},"integrations":{"title":"Integrations","description":"Embed BoringSec security scanning directly in your development workflow","quickStart":{"label":"Quick Start: Scan via API","description":"Run a security scan from your terminal right now:"},"tabs":{"cli":"CLI","vscode":"VS Code","claude":"Claude Code","cicd":"CI/CD","rules":"AI Rules"},"cli":{"title":"BoringSec CLI","description":"Scan URLs and code from any terminal","badge":"REST API","scanUrlLabel":"Scan a URL","scanCodeLabel":"Scan code files for secrets","checkUsageLabel":"Check usage & quota","generateRulesLabel":"Generate .cursorrules","featuresTitle":"Features","feature1":"Scan URLs for 75+ security issues","feature2":"Scan code files for hardcoded secrets, unsafe patterns","feature3":"Colorized terminal output with severity badges","feature4":"CI/CD friendly: exit code 1 on critical findings","feature5":"Works with GitHub Actions, GitLab CI, any CI system"},"vscode":{"title":"VS Code / Cursor Extension","description":"Inline security diagnostics as you code","badge":"Coming to Marketplace","notice":"The VS Code extension is built and will be published to the Marketplace soon. Use the REST API tab for immediate access to all scanning features.","comingSoonLabel":"Extension Features (coming soon)","featuresTitle":"Features","feature1":"Inline diagnostics in the Problems panel","feature2":"Real-time status bar with security score","feature3":"Auto-scan on save (configurable)","feature4":"Quick fix suggestions from 42+ templates","feature5":"GitHub Actions workflow generator","feature6":"Scan history sidebar","feature7":"Works in Cursor with full AI Composer integration","stat1Title":"30+ Patterns","stat1Sub":"Secret detection","stat2Title":"Real-time","stat2Sub":"Scan on save","stat3Title":"Status Bar","stat3Sub":"Live score"},"claude":{"title":"Claude Code MCP Plugin","description":"Local security copilot for code quality, security findings, remediation, and AI-ready rules","badge":"Device Auth","notice":"BoringSec MCP now supports one-time device authorization, project bootstrap via init, workspace-managed policy bundles, and centrally managed team governance. Users approve a short code in the browser and the package stores a dedicated machine credential locally, preferring the OS keychain when supported.","step1":"1. Authenticate once","step2":"2. Bootstrap the workspace","step3":"3. Claude Code project config","toolsTitle":"Available Tools","advancedNote":"Raw tools like {scan}, {project}, and {code} are hidden from the default editor-facing MCP surface so Claude Code does not show giant payload previews. Power users can opt into them with {flag}.","featuresTitle":"Features","feature1":"Clean editor-facing MCP surface with compact project review instead of noisy raw payload tools","feature2":"One-time device authorization instead of manual key copy","feature3":"Project bootstrap for Claude Code and Cursor with one init command","feature4":"Doctor command for auth, storage, config, and device posture diagnostics","feature5":"Git-aware local scans with staged, diff, and .boringsecignore support","feature6":"Workspace-managed policy bundles and starter AGENTS.md / .cursorrules files","feature7":"Team-managed governance for central policy packs, waiver requirements, and shared merge thresholds","feature8":"Same tier gates, scopes, usage accounting, and overage rules as the rest of BoringSec","feature9":"Compliance reports (PCI DSS, GDPR, SOC 2, HIPAA, ISO 27001)"},"cicd":{"title":"CI/CD Integration","description":"Automate security checks on every pull request and schedule regular scans","privacyNote":"CI scans use the same privacy filter as local scans. Hosted review runs send sanitized code/config only when you explicitly enable them.","setupTitle":"Setup (2 minutes)","setupStep1":"1. Add BORINGSEC_API_KEY to your repository secrets","setupStep2":"2. Copy the workflow file below into your repository","setupStep3":"3. Push, and BoringSec runs on every PR automatically","githubTitle":"GitHub Actions — PR Security Review","githubSaveHint":"Save as .github/workflows/boringsec-pr-check.yml","gitlabTitle":"GitLab CI — MR Security Gate","autoGenTitle":"Auto-generate from Claude Code","autoGenHint":"BoringSec auto-detects your CI platform:","featuresTitle":"CI features","feature1":"Block PRs with critical/high severity findings","feature2":"SARIF output for GitHub Code Scanning","feature3":"Markdown review comments on pull requests","feature4":"Scheduled full scans (weekly/daily/custom)","feature5":"Same privacy filter — secrets and .env values are redacted before hosted analysis"},"rules":{"title":"AI Security Rules Generator","description":"Generate .cursorrules and AGENTS.md to make every AI coding session security-aware","badge":"AI-Native","intro":"These files instruct AI tools (Cursor, Claude Code) to follow security best practices specific to your stack. Drop them in your project root and every AI-generated code will be security-aware.","stackLabel":"Stack","formatLabel":"Format","stackNextjsSupabase":"Next.js + Supabase","stackNextjsFirebase":"Next.js + Firebase","stackNextjsClerk":"Next.js + Clerk","stackNextjsStripe":"Next.js + Stripe","formatBoth":"Both (.cursorrules + AGENTS.md)","formatCursorrules":".cursorrules only","formatAgentsMd":"AGENTS.md only","generating":"Generating...","generate":"Generate","generatedTitle":"Generated Rules","whatGeneratedTitle":"What gets generated","feature1":"Stack-specific security rules (Supabase RLS, Clerk middleware, Stripe webhooks)","feature2":"Generic OWASP rules (XSS, injection, CORS, secrets management)","feature3":"Project-specific issues from your latest scan results","feature4":"Rules for both Cursor (.cursorrules) and Claude Code (AGENTS.md)"},"privacy":{"title":"Privacy & Data Transparency","intro":"BoringSec runs a client-side privacy filter on every outbound payload. Your secrets, API keys, database URLs, and .env values are automatically redacted before any data leaves your machine.","neverSentTitle":"Never sent to our servers","neverSent1":"API keys & secrets (Stripe, GitHub, AWS, etc.)","neverSent2":".env values and database URLs","neverSent3":"Private keys and JWTs","neverSent4":"Passwords and auth tokens","neverSent5":"Raw prompts and full local report payloads in usage telemetry","sentTitle":"Sent for analysis (redacted)","sent1":"Sanitized source/config payloads for hosted workspace review, raw advanced scans, and review_diff","sent2":"Package dependencies and safe config metadata","sent3":"Privacy-safe MCP run summaries (counts, durations, hashed workspace identity)","sent4":"Finding IDs and governance feedback metadata","runHint":"Run boringsec_privacy_report in Claude Code for a full data-flow breakdown per tool."},"ctas":{"mcpStatsTitle":"View MCP Usage Statistics","mcpStatsDescription":"Open the MCP Cockpit for active devices, workspace health, findings, guidance, and privacy boundaries","mcpStatsCta":"MCP Cockpit","ciCredsTitle":"Need credentials for CI?","ciCredsDescription":"MCP uses device auth; CI uses standard API keys","ciCredsCta":"Manage Keys"}},"settings":{"title":"Settings","profile":{"title":"Profile","nameLabel":"Name","emailLabel":"Email"},"notifications":{"title":"Notifications","emailAlerts":"Email Alerts"},"danger":{"title":"Danger Zone","deleteAccount":"Delete Account"}},"badgeGenerator":{"title":"Badge","description":"Generate a security badge for your website","domain":"Domain","unverified":"Unverified","empty":"No domains added yet. Add a domain from the Domains page to generate a badge.","style":"Style","styles":{"minimal":"Minimal","full":"Full","monitored":"Monitored"},"monitoredPaid":"Monitored score badges are available on eligible paid monitoring plans.","monitoredVerify":"Verify this domain to use the monitored score badge.","theme":"Theme","themes":{"light":"Light","dark":"Dark"},"preview":"Preview","previewAlt":"Security badge preview","badgeAlt":"BoringSec security score","evidenceNotice":"Grades publish only for verified domains with current, complete evidence. Partial and stale scans stay explicitly labelled until coverage settles or a re-scan completes.","embedCode":"Embed Code","formats":{"markdown":"Markdown","imageUrl":"Image URL"},"copy":"Copy","copied":"Copied!","copyHtml":"Copy HTML embed code","copiedHtml":"HTML embed code copied","copyMarkdown":"Copy Markdown embed code","copiedMarkdown":"Markdown embed code copied","copyUrl":"Copy badge image URL","copiedUrl":"Badge image URL copied","instructions":{"title":"Instructions","verify":"Verify domain ownership before publishing a security grade.","select":"Select your domain, badge style, and light or dark theme above.","copy":"Copy the embed code in your preferred format (HTML, Markdown, or direct URL).","paste":"Paste the code into your website footer, README, or documentation.","rescan":"Re-scan stale evidence; the badge refreshes automatically after the new result settles."}},"mcpStats":{"title":"MCP Cockpit","description":"A real security work queue for vibe coders: what BoringSec found, why it matters, how to fix it, and how to prove the issue is actually gone.","statusActive":"BoringSec MCP is active","aiEnabled":"AI deep analysis enabled","aiPaid":"AI deep analysis on paid plans","metricOpenLabel":"Open now","metricOpenHint":"Issues still present in the latest report","metricVerifyLabel":"Verify","metricVerifyHint":"Fixes that should be re-checked with BoringSec","metricCoverageLabel":"Coverage","metricCoverageHint":"MCP runs in the last 30 days","metricPrecisionLabel":"Precision","metricPrecisionHint":"Runs using the semantic type-aware engine","privacyLocalOnly":"Local only: {count}","privacyHostedSanitized":"Hosted sanitized: {count}","privacyMetadataOnly":"Metadata only: {count}","nextDoTitle":"What to do next","noBlockers":"No urgent MCP-specific blockers detected in the current reporting window.","promptShortcutsTitle":"Prompt shortcuts that matter now","noPrompts":"No prompt recommendations yet. Run a workspace scan or diff review to generate them.","trustTitle":"Why this reporting is trustworthy","latestEngineLabel":"Latest engine","noEngineVersion":"No engine version stored yet","storageBoundaryLabel":"Storage boundary","storageSafe":"Stored server-side: safe counts, severity and confidence mix, verifier split, engine profile, validator registry summary, hashed workspace identity, and remediation metadata.","storageNever":"Never stored here: raw code, prompts, private file contents, raw paths, or secret values.","validatorRegistryLabel":"Validator registry","validatorRegistryCounts":"URL sanitizers: {url} · Payload sanitizers: {payload} · Command sanitizers: {command}","validatorRegistryExamples":"Examples: {examples}","validatorRegistryNone":"None exposed yet","dataControlsTitle":"Data controls and lifecycle","localHistoryLabel":"Local history","serverStatsLabel":"Server-side stats","serverDeletionEnabled":"You can delete persisted MCP telemetry summaries for your account when needed.","serverDeletionDisabled":"Server-side MCP stat deletion is not enabled for this account yet.","releaseHygieneLabel":"Release hygiene","releaseHygieneHint":"Use the upgrade and release-notes commands to stay on the supported precision engine and understand why an update matters before you take it.","devicesTitle":"Connected devices and editor footprint","mcpDevicesAuthorizedDevice":"authorized device","deviceLastSeen":"last seen {date}","deviceNotUsed":"not used yet","deviceScopes":"Scopes: {scopes}","deviceExpires":"expires {date}","noDevices":"No active MCP devices found yet.","workspaceTitle":"Workspace health","workspaceStats":"{runs} run(s) · {findings} finding(s) · {critical} critical · {high} high","workspaceCiConnected":"CI connected","noWorkspaces":"No workspace history yet.","reportsTitle":"Recent MCP reports","reportFallbackTitle":"Recent MCP report","reportStats":"{findings} finding(s) · {critical} critical · {high} high","aiGuidanceCached":"AI guidance cached","noReports":"No detailed reports yet. Run a workspace review from Claude Code to populate this view.","hostedScansTitle":"Hosted scans and next moves","hostedScanNoScore":"No score","hostedScanStats":"{score}/100 · {issues} issue(s) · {date}","noHostedScans":"No hosted website scans in this window.","guidanceHint":"Want deeper guidance in-editor? Open Claude Code and use one of the prompts from this page, then re-run BoringSec to move items from Open now to Verify fix.","guidanceOpenNow":"Open now","guidanceVerifyFix":"Verify fix","unlockAi":"Unlock AI deep analysis on a paid plan","provenanceLocal":"Local only","provenanceHosted":"Hosted sanitized","provenanceMetadata":"Metadata only","analysisProfileSemantic":"Semantic type-aware v2","analysisProfileLegacy":"Legacy / unknown","findingsSummary":"{critical} critical · {high} high","timeSavedDevices":"{devices} device(s) · {workspaces} workspace(s)","widgets":{"activity":{"title":"MCP activity","empty":"No activity data yet. Start using BoringSec MCP tools to see your activity chart.","chartLabel":"{count, plural, one {MCP activity chart showing # day of data} other {MCP activity chart showing # days of data}}","unknownDate":"Unknown date","barLabel":"{date}: {count, plural, one {# call} other {# calls}}"},"recommendations":{"title":"Recommendations","empty":"No outstanding issues. Great security posture!","topTitle":"Top recommendations","unknownIssue":"Security issue","fixPromptTemplate":"Fix the \"{title}\" ({code}) security issue using BoringSec. Run boringsec_fix with issueCode \"{code}\" and apply the recommended fix.","occurrences":"{count, plural, one {# occurrence} other {# occurrences}}","copied":"Copied","fixPrompt":"Fix prompt","hint":"Copy a fix prompt and paste it into Claude Code to resolve the issue with BoringSec.","severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info","unknown":"Unknown"}},"issueFeed":{"title":"Actionable issue feed","empty":"No active MCP issues are currently open. When BoringSec finds something worth fixing, this feed will turn it into a prioritized todo list with fix and verification prompts.","unknownIssue":"Security issue","recommendationUnavailable":"Recommendation unavailable.","status":{"open":"Open now","verifyFix":"Verify fix","monitoring":"Monitoring"},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info"},"confidence":{"high":"high","medium":"medium","low":"low"},"confidenceLabel":"{confidence} confidence","verification":{"verified":"Verified","highConfidence":"High confidence","reviewOnly":"Review only"},"timesSurfaced":"{count, plural, one {Time surfaced} other {Times surfaced}}","workspaces":"{count, plural, one {Workspace} other {Workspaces}}","whyTitle":"Why this matters","whyFallback":"BoringSec marked this issue because the current evidence suggests it can turn into a security or reliability problem if left unresolved.","attackScenarioLabel":"What could go wrong:","evidenceTitle":"Evidence and confidence","noEvidence":"No short evidence snippet was stored for this issue.","fixTitle":"Fix now","copyFixPrompt":"Copy fix prompt","copyVerifyPrompt":"Copy verify prompt","copyExplainPrompt":"Copy explain prompt","promptHint":"Use the fix prompt in Claude Code or Cursor, then use the verify prompt to prove the issue is actually gone.","checklistTitle":"Execution checklist","step":"Step {number}","stepUnavailable":"Step details unavailable.","fileLabel":"File:","noChecklist":"No issue-specific checklist was stored yet. Use the fix prompt to generate one in your editor.","verificationTitle":"Verification","verificationFallback":"Re-run BoringSec after the change and confirm the same evidence does not reappear.","seenDates":"First seen {first} · Last seen {last}","todoPriority":{"immediate":"Immediate","next":"Next","later":"Later","unknown":"Planned"},"ai":{"title":"AI deep analysis","rootCauseLabel":"Likely root cause:","description":"Generate an execution-focused analysis for the related MCP report. This uses only privacy-safe summary data.","generating":"Generating...","generate":"Generate AI analysis","error":"Could not generate AI guidance. Please try again."},"loop":{"title":"Re-run and verify loop","fixTitle":"1. Fix with context","fixDescription":"Copy the fix prompt into Claude Code or Cursor so the model works against a concrete BoringSec issue, not a vague todo.","verifyTitle":"2. Re-run verification","verifyDescription":"Use the verify prompt after changes. Ask BoringSec to prove the evidence disappeared instead of assuming the fix worked.","learnTitle":"3. Keep the lesson","learnDescription":"Use the explain prompt to understand the pattern and convert the learning into rules, tests, or CI checks."}}},"stats":{"successRate":{"title":"Success Rate","subtitle":"Stable MCP tool runs across your active sessions"},"findingsSurfaced":{"title":"Findings Surfaced"},"fixProgress":{"title":"Fix Progress","subtitle":"Tracked config writes, autofix, and remediation work"},"timeSaved":{"title":"Time Saved"}}},"governance":{"title":"Organization Governance","description":"Central baselines, rollout posture, and drift across linked teams","emptyTitle":"No organization baselines yet","emptyDescription":"Link a team to an organization policy slug in team settings to activate the central governance plane.","linkedTeams":"{total} linked team(s), {drifted} with active drift","baselineManaged":"Managed baseline","baselineDefault":"Default baseline","metricsOrgOnly":"Org-only teams","metricsMerge":"Merge teams","metricsDrifted":"Drifted teams","metricsStackOverrides":"Stack overrides: {count}","metricsPackOverrides":"Pack overrides: {count}","metricsEditorOverrides":"Editor overrides: {count}","metricsWaiverOverrides":"Waiver overrides: {count}","metricsLifecycleOverrides":"Lifecycle overrides: {count}","metricsUpdated":"Updated: {date}","metricsUpdatedNever":"Updated: —","linkedTeamsLabel":"Linked teams","openControlPlane":"Open Control Plane","detail":{"title":"Org Governance","description":"Central baseline, linked teams, and drift posture","backToGovernance":"Back to Governance","baselineRolloutTitle":"Baseline Rollout","baselineRolloutDescription":"Teams inheriting the {slug} baseline and where they still diverge from the central default.","metricLinkedTeams":"Linked teams","metricOrgOnly":"Strict org-only","metricDrifted":"Drifted teams","currentBaselineTitle":"Current baseline","baselineStack":"Stack: {value}","baselinePolicyPacks":"Policy packs: {value}","baselineAllowedEditors":"Allowed editors: {value}","baselinePolicyMode":"Managed policy mode: {value}","baselineDeviceExpiry":"Device expiry: {days} day(s)","baselineRotateBefore":"Rotate before: {days} day(s)","baselineMaxWaiver":"Max waiver days: {days}","baselineBlockOn":"Block on: {severities}","baselineValueEmpty":"—","teamRole":"Role: {role} · Stack: {stack}","teamStackInherits":"inherits org stack","teamDriftOverride":"{dimension} override","teamAligned":"Aligned with org baseline","driftAnalyticsTitle":"Drift Analytics","driftAnalyticsDescription":"Which dimensions diverge most often from the central baseline.","driftStack":"Stack overrides","driftPacks":"Pack overrides","driftEditors":"Editor overrides","driftWaivers":"Waiver overrides","driftLifecycle":"Lifecycle overrides","auditTrailTitle":"Audit Trail","auditTrailDescription":"Latest org baseline changes and the actors behind them.","auditEmpty":"No org-level governance updates recorded yet.","auditUnknownActor":"Unknown actor","auditSnapshot":"snapshot","evidencePassed":"{passed} passed, {failed} failed"},"editor":{"title":"Governance Editor","cardTitle":"Baseline Editor","cardDescription":"Central org-level control plane for policy packs, editor allowlist, and waiver lifecycle policy.","labelStack":"Stack","labelRuleFormat":"Rule Format","formatBoth":"Both","labelManagedPolicyMode":"Managed Policy Mode","managedPolicyModeMerge":"Merge managed","managedPolicyModeOnly":"Managed only","labelPolicyPacks":"Policy Packs","policyPacksSelected":"{count} selected","labelAllowedEditors":"Allowed Editors","labelDeviceExpiryDays":"Device Expiry Days","labelRotateBeforeDays":"Rotate Before Days","labelMaxWaiverDays":"Max Waiver Days","waiverRequireOwner":"Require Waiver Owner","waiverRequireApproval":"Require Waiver Approval","waiverRequireTicket":"Require Waiver Ticket","waiverRequireExpiry":"Require Waiver Expiry","labelBlockOnSeverities":"Block On Severities","saveButton":"Save Org Baseline","saveSuccess":"Organization baseline saved.","saveSuccessWithKeys":"Saved org baseline changes: {keys}","errorNoTeam":"No eligible linked team is available to save the organization baseline.","errorSaveFallback":"Failed to save organization baseline"},"waiverQueue":{"title":"Waiver Queue"}},"templates":{"title":"Fix Templates","description":"AI-ready fix templates for your findings","empty":{"title":"No templates yet","description":"Run a scan to generate fix templates."},"lockedTitle":"Fix Templates","lockedSubtitle":"AI-ready remediation prompts for Cursor, Claude Code, Windsurf, and more.","lockedCardTitle":"Full fix templates unlock on Pro","lockedCardDescription":"Free plans can scan and review findings. Pro unlocks copy-ready prompts for the issues your team needs to fix next.","previewBadge":"Preview","previewPromptHint":"Upgrade to reveal the full prompt and one-click copy action for this remediation.","upgradeToPro":"Upgrade to Pro","runAnotherScan":"Run another scan first","headerSubtitle":"Copy-paste security fix prompts optimized for your AI coding tool","searchPlaceholder":"Search by vulnerability or title...","statsCount":"{count} templates","statsPlatforms":"{count} platforms supported","statsTagline":"Built for vibe coders","copied":"Copied!","copyFor":"Copy for {platform}","noResults":"No templates match your search.","noResultsHint":"Try a different keyword or clear the search."},"reports":{"title":"Reports","description":"Compliance reports, SEO audits, and security scan history","tabs":{"compliance":"Compliance","seoAudits":"SEO Audits","securityScans":"Security Scans"},"seoQuota":{"title":"SEO Audit Quota","description":"{used} of {limit} SEO audits used this month. Resets {resetDate}.","remaining":"{remaining} audits remaining this month","exhausted":"Quota reached. Resets {resetDate}.","freeTitle":"SEO Audits require PRO or higher","freeDescription":"Upgrade to PRO to run up to 10 SEO audits per month from your dashboard. Or buy a single audit for €34.99.","upgradeCta":"Upgrade to PRO"},"seoForm":{"title":"Run New SEO Audit","description":"Enter a URL to start a full SEO audit (up to 100 pages).","quotaExhaustedHint":"Monthly quota reached. Resets {resetDate}.","placeholder":"yourdomain.com","ariaLabel":"Enter URL for SEO audit","cta":"Audit","scanning":"Auditing...","exhaustedUpgradeHint":"Need more audits?","exhaustedUpgradeLink":"Upgrade to BUSINESS for 50/mo","errorInvalid":"Please enter a valid URL.","errorNetwork":"Network error — please try again.","errorRateLimited":"Too many requests — please slow down.","errorTimeout":"Request timed out — please try again.","errorUnknown":"Something went wrong — please retry."},"seoHistory":{"title":"Past SEO Audits","description":"Previously completed SEO audits for your domains","score":"Score: {score}","aiScore":"AI readiness: {score}","pages":"{count} pages","emptyTitle":"No SEO audits yet","emptyDescription":"Launch your first SEO audit above."},"securityScans":{"title":"Security Scans","description":"Security scans run on your domains","score":"Score: {score} ({grade})","scoreUnavailable":"Score unavailable","emptyTitle":"No security scans yet","emptyDescription":"Run a security scan from the homepage or Scans page.","goToScans":"Go to Scans"},"empty":{"title":"No reports yet","description":"Generate a compliance report for one of your scanned domains."},"generate":"Generate Report","generating":"Generating...","frameworkVersion":"Version: {version} • {count} requirements","upgradeToAccess":"Upgrade to Access","generateNewTitle":"Generate New Report","generateNewDescription":"Create a compliance assessment report for one of your domains","noDomainsTitle":"No domains to report on","noDomainsDescription":"Add a domain and run a scan first","addDomain":"Add Domain","recentTitle":"Recent Reports","recentDescription":"Previously generated compliance reports","reportSummary":"{passed} passed, {failed} failed","viewReport":"View","export":{"pdf":"Export PDF","csv":"Export CSV"},"detail":{"complianceReport":"Compliance Report","backToReports":"Back to reports","passedLabel":"Passed","failedLabel":"Failed","partialLabel":"Partial","complianceScore":"Compliance Score","frameworkDescription":"Version {version} • {count} requirements assessed","requirementTitle":"Requirement Assessment","requirementDescription":"Detailed breakdown of each compliance requirement. Click to expand and see evidence.","checksPerformed":"Checks Performed","failedChecksLabel":"Failed Checks","passedChecksLabel":"Passed Checks","otherChecksLabel":"Other","findingsLabel":"Findings:","evidenceSummary":"{passed} passed, {failed} failed"}},"usage":{"approaching_limit":"You've used {pct}% of your monthly {resource}. Consider upgrading or enabling Extra Usage.","limit_reached":"Monthly {resource} limit reached. Enable Extra Usage to continue or upgrade your plan.","cap_approaching":"Extra Usage spending is at {pct}% of your cap. Increase your cap to avoid interruptions.","cap_reached":"Spending cap reached. Increase your cap or upgrade your plan to continue using extra features.","enableExtraUsage":"Enable Extra Usage","manageCap":"Manage Cap","dismiss":"Dismiss warning"},"onboarding":{"gettingStarted":"Getting Started","stepsCompleted":"{completed} of {total} steps completed","steps":[{"id":"welcome","title":"Welcome to BoringSec","description":"You are one scan away from your first actionable security report.","action":"Continue"},{"id":"run-first-scan","title":"Run Your First Scan","description":"Paste a website URL or GitHub repo and we will route it to the right scanner.","action":"Start Scan"},{"id":"review-results","title":"Review Your Findings","description":"See severity-ranked issues with exact fixes and rerun guidance.","action":"Open Scans"},{"id":"setup-alerts","title":"Set Up Alerts","description":"Get notified when new issues appear or your score changes.","action":"Configure Alerts"},{"id":"add-domain","title":"Add Monitoring Target","description":"Add the production domain you want us to watch continuously.","action":"Add Domain"},{"id":"invite-team","title":"Invite Your Team","description":"Bring teammates into the same workspace once the first report is live.","action":"Manage Team"},{"id":"setup-mcp","title":"Set Up BoringSec MCP","description":"Install the MCP server in Claude Code or Cursor for inline security scanning while you code.","action":"View Setup"}],"stepOf":"Step {current} of {total}","skip":"Skip","continue":"Continue"},"overview":{"welcome":{"firstRunBadge":"First run","continueWithPlan":"Continue with {plan}","title":"Welcome, {name}","description":"Your workspace is ready. The fastest path to value is to run one scan now, then turn on alerts for the target you care about most.","checklist":{"title":"Setup checklist","progress":"{completed} of {total} complete","addDomain":{"title":"Add a domain","description":"Create the asset BoringSec should protect."},"verifyOwnership":{"title":"Verify ownership","description":"Prove control before monitoring becomes trusted."},"firstScan":{"title":"Run first scan","description":"Generate the first evidence set and score."},"configureAlerts":{"title":"Configure alerts","description":"Send important changes to the right channel."}},"websiteScan":{"title":"Website scan","description":"Paste your production URL and get your first report in minutes."},"githubReview":{"title":"Code Audit","proBadge":"Pro+","description":"Run a code audit when your security work starts in the repo, not production."},"alerts":{"title":"Alerts","description":"Turn on notifications once the first scan lands, so the dashboard keeps working for you."},"cta":{"runFirstScan":"Run your first scan","reviewGithubRepo":"Audit a GitHub repo","unlockGithubReview":"Unlock Code Audit"}},"actionCenter":{"title":"Action Center","actions":{"fixCritical":{"title":"Fix critical issues","detail":"{count} critical on {hostname}"},"fixHigh":{"title":"Fix high-risk issues","detail":"{count} high on {hostname}"},"reviewFailed":"Review failed scan","verifyDomain":"Verify domain","enableMonitoring":"Enable monitoring","firstScan":"Run first scan","enableSeo":"Enable SEO monthly audit"}},"domainHealth":{"title":"Domain Health","manageAll":"Manage All","empty":{"title":"No domains yet","description":"Add your first domain to start monitoring","cta":"Add Domain"},"notScanned":"Never scanned","noScanHistory":"No scan history","noIssues":"No issues","risk":{"scanFailed":"Scan failed","verifyDomain":"Verify domain","monitoringOff":"Monitoring off","seoAuditOff":"SEO audit off","neverScanned":"Never scanned","staleScan":"Stale scan"},"addAnotherDomain":"Add another domain","moreDomains":"+{count} more domains","upgradeMoreDomains":{"title":"Want to monitor more domains?","description":"Upgrade to Pro for 10 domains + monitoring"},"builtWith":"Built with {platform}","vibeScore":"Vibe Score"},"trend":{"title":"Trend","emptyTitle":"No scan history yet","emptyDescription":"Run your first scan to see trends","domainLabel":"Trend domain"},"quickScan":{"title":"Quick Scan","placeholder":"Enter a website or owner/repo...","cta":"Scan","lastScan":"Last scan {time}","notScannedYet":"Not scanned yet","rescan":"Re-scan"},"recentScans":{"title":"Recent Scans","viewAll":"View All","empty":"No scans yet","addFirstDomain":"Add your first domain","issues":"{count} issues"},"alerts":{"title":"Alerts","unread":"{count} unread","allClear":"All clear!","noUnread":"No unread alerts","moreAlerts":"+{count} more alerts"},"stats":{"domains":"Domains","scansUsed":"Scans Used","unlimited":"Unlimited","ofScansUsed":"of {total} scans used","scanLimitReached":"Scan limit reached","currentPlan":"Current Plan","thisMonth":"{count} this month"},"proFeatures":{"monitoring":{"title":"Monitoring","active":"Active","scanningEvery":"Scanning every {interval}h","domainsMonitored":"{count} domains monitored"},"apiAccess":{"title":"API Access","requestsPerHour":"requests per hour","manageKeys":"Manage Keys"},"team":{"title":"Team","memberSlots":"team member slots","manageTeam":"Manage Team"},"compliance":{"title":"Compliance","generateReport":"Generate Report"}},"vibeCodeTools":{"title":"Vibe Code Tools","description":"Deep scan launchpad for web, repos, APIs, and AI remediation","aiNativeBadge":"AI-Native","tools":{"websiteDeepScan":{"title":"Website Deep Scan","description":"Live apps: web checks + tech stack, XSS, injection, ports, WAF, GDPR, subdomains"},"githubReview":{"title":"Code Audit","description":"Repository audit: auth, secrets, unsafe patterns, TS strictness, deps, tests, dead code"},"apiCodeScan":{"title":"API Code Scan","description":"Use `/api/v1/scan/code` and `/api/v1/scan/project` in CLI, CI, or editor flows"},"badgeGenerator":{"title":"Badge Generator","description":"Generate a monitored BoringSec badge for your site"},"fixTemplates":{"title":"Fix Templates","description":"Copy-paste remediation prompts and handoff-ready fix paths for AI coding tools"},"deepReports":{"title":"Deep Reports","description":"Trust notes, technical details, exports, and verification-aware report summaries"}},"tags":{"xss":"XSS","injection":"Injection","waf":"WAF","subdomains":"Subdomains","gdpr":"GDPR","firebaseSupabase":"Firebase / Supabase","trustReports":"Trust-aware reports"}},"ideIntegration":{"title":"Scan While You Code","description":"Security checks directly in your editor & terminal","quickSetup":"Quick Setup","getApiKey":"Get API Key","viewDocs":"View Docs","setupSteps":{"copyKey":"Copy your API key from Settings","runSetup":"Run setup command in your terminal","autoSecurity":"Security runs automatically as you code"},"cards":{"restApi":{"title":"REST API","description":"Scan URLs, code, and repos via API. CI/CD ready."},"codeScanning":{"title":"Code Scanning","description":"Scan files for secrets, auth issues, unsafe patterns."},"cursorRules":{"title":".cursorrules Generator","description":"Make AI coding sessions security-aware."}}},"securityActivity":{"title":"Security activity","description":"Recent account-level audit events","empty":{"title":"No recent activity","description":"Protected dashboard actions will appear here."},"actions":{"alertSettingsUpdated":"Alert settings updated","apiKeyCreated":"API key created","apiKeyRevoked":"API key revoked","complianceReportCreated":"Compliance report created","domainAdded":"Domain added","domainRemoved":"Domain removed","domainUpdated":"Domain updated","domainVerified":"Domain verified","findingFeedbackSubmitted":"Finding feedback submitted","githubIssueCreated":"GitHub issue created","issueUpdated":"Issue updated","mcpAuthorizationApproved":"MCP authorization approved","mcpAuthorizationDenied":"MCP authorization denied","mcpDeviceKeyIssued":"MCP device key issued","mcpDeviceKeyUsed":"MCP device key used","reportGenerated":"Report generated","scanDeadLettered":"Scan moved to dead letter","staleScanReplaced":"Stale scan replaced","scanImported":"Scan imported","scanStarted":"Scan started","activeScanReused":"Active scan reused","scanRetryScheduled":"Scan retry scheduled","teamCreated":"Team created","teamInviteSent":"Team invite sent","teamMemberJoined":"Team member joined","teamMemberRemoved":"Team member removed","teamMemberRoleUpdated":"Team member role updated","userCreated":"User created"},"resources":{"dashboard":"Dashboard","alert":"Alert","alertSettings":"Alert settings","apiKey":"API key","complianceReport":"Compliance report","domain":"Domain","issue":"Issue","mcpAuthorization":"MCP authorization","organization":"Organization","organizationWaiver":"Organization waiver","report":"Report","scan":"Scan","team":"Team","teamInvitation":"Team invitation","teamMember":"Team member","user":"User"}},"impersonation":{"viewOnlyMode":"View Only Mode","viewingAs":"Viewing as {email}","loggedInAs":"(logged in as {adminEmail})","mutationsBlocked":"All mutations are blocked","endImpersonation":"Exit & Return to Admin","exiting":"Exiting...","forceExit":"Force Exit"}},"integrationsPage":{"title":"Integrations","description":"Embed BoringSec security scanning directly in your development workflow","quickStart":{"title":"Quick Start: Scan via API","description":"Run a security scan from your terminal right now:"},"tabs":{"cli":"CLI","vscode":"VS Code","claudeCode":"Claude Code","cicd":"CI/CD","aiRules":"AI Rules"},"cli":{"title":"BoringSec CLI","description":"Scan URLs and code from any terminal","sections":{"scanUrl":"Scan a URL","scanCode":"Scan code files for secrets","checkUsage":"Check usage & quota","generateRules":"Generate .cursorrules"},"features":{"title":"Features","scan75Plus":"Scan URLs for 75+ security issues","scanCode":"Scan code files for hardcoded secrets, unsafe patterns","colorized":"Colorized terminal output with severity badges","cicdFriendly":"CI/CD friendly: exit code 1 on critical findings","githubActions":"Works with GitHub Actions, GitLab CI, any CI system"}},"vscode":{"title":"VS Code / Cursor Extension","description":"Inline security diagnostics as you code","comingSoon":"Coming to Marketplace","notice":"The VS Code extension is built and will be published to the Marketplace soon. Use the REST API tab for immediate access to all scanning features.","featuresComingSoon":"Extension Features (coming soon)","features":{"title":"Features","inlineDiagnostics":"Inline diagnostics in the Problems panel","statusBar":"Real-time status bar with security score","autoScan":"Auto-scan on save (configurable)","quickFix":"Quick fix suggestions from 42+ templates","actionsGenerator":"GitHub Actions workflow generator","scanHistory":"Scan history sidebar","cursorIntegration":"Works in Cursor with full AI Composer integration"},"stats":{"patterns":{"title":"30+ Patterns","sub":"Secret detection"},"realtime":{"title":"Real-time","sub":"Scan on save"},"statusBar":{"title":"Status Bar","sub":"Live score"}}},"claudeCode":{"title":"Claude Code MCP Plugin","description":"Local security copilot for code quality, security findings, remediation, and AI-ready rules","deviceAuthBadge":"Device Auth","notice":"BoringSec MCP now supports one-time device authorization, project bootstrap via init, workspace-managed policy bundles, and centrally managed team governance.","steps":{"authenticate":"1. Authenticate once","bootstrap":"2. Bootstrap the workspace","config":"3. Claude Code project config"},"availableTools":"Available Tools","features":{"title":"Features","cleanSurface":"Clean editor-facing MCP surface with compact project review instead of noisy raw payload tools","deviceAuth":"One-time device authorization instead of manual key copy","projectBootstrap":"Project bootstrap for Claude Code and Cursor with one init command","doctorCommand":"Doctor command for auth, storage, config, and device posture diagnostics","gitAware":"Git-aware local scans with staged, diff, and .boringsecignore support","policyBundles":"Workspace-managed policy bundles and starter AGENTS.md / .cursorrules files","teamGovernance":"Team-managed governance for central policy packs, waiver requirements, and shared merge thresholds","tierGates":"Same tier gates, scopes, usage accounting, and overage rules as the rest of BoringSec","compliance":"Compliance reports (PCI DSS, GDPR, SOC 2, HIPAA, ISO 27001)"}},"cicd":{"title":"CI/CD Integration","description":"Automate security checks on every pull request and schedule regular scans","privacyNote":"CI scans use the same privacy filter as local scans. Hosted review runs send sanitized code/config only when you explicitly enable them.","setup":{"title":"Setup (2 minutes)","step1":"Add BORINGSEC_API_KEY to your repository secrets","step2":"Copy the workflow file below into your repository","step3":"Push — BoringSec will run on every PR automatically"},"githubActions":{"title":"GitHub Actions — PR Security Review","saveAs":"Save as .github/workflows/boringsec-pr-check.yml"},"gitlabCi":{"title":"GitLab CI — MR Security Gate"},"autoGenerate":{"title":"Auto-generate from Claude Code","description":"BoringSec auto-detects your CI platform:"},"features":{"title":"CI features","blockPrs":"Block PRs with critical/high severity findings","sarif":"SARIF output for GitHub Code Scanning","markdownComments":"Markdown review comments on pull requests","scheduledScans":"Scheduled full scans (weekly/daily/custom)","privacyFilter":"Same privacy filter — secrets and .env values are redacted before hosted analysis"}},"aiRules":{"title":"AI Security Rules Generator","description":"Generate .cursorrules and AGENTS.md to make every AI coding session security-aware","aiNativeBadge":"AI-Native","intro":"These files instruct AI tools (Cursor, Claude Code) to follow security best practices specific to your stack. Drop them in your project root and every AI-generated code will be security-aware.","stackLabel":"Stack","formatLabel":"Format","stacks":{"nextjsSupabase":"Next.js + Supabase","nextjsFirebase":"Next.js + Firebase","nextjsClerk":"Next.js + Clerk","nextjsStripe":"Next.js + Stripe"},"formats":{"both":"Both (.cursorrules + AGENTS.md)","cursorrules":".cursorrules only","agentsMd":"AGENTS.md only"},"generateButton":"Generate","generating":"Generating...","generatedRules":"Generated Rules","features":{"title":"What gets generated","stackSpecific":"Stack-specific security rules (Supabase RLS, Clerk middleware, Stripe webhooks)","owasp":"Generic OWASP rules (XSS, injection, CORS, secrets management)","projectSpecific":"Project-specific issues from your latest scan results","bothTools":"Rules for both Cursor (.cursorrules) and Claude Code (AGENTS.md)"}},"privacy":{"title":"Privacy & Data Transparency","description":"BoringSec runs a client-side privacy filter on every outbound payload. Your secrets, API keys, database URLs, and .env values are automatically redacted before any data leaves your machine.","neverSent":{"title":"Never sent to our servers","items":{"apiKeys":"API keys & secrets (Stripe, GitHub, AWS, etc.)","envValues":".env values and database URLs","privateKeys":"Private keys and JWTs","passwords":"Passwords and auth tokens","rawPrompts":"Raw prompts and full local report payloads in usage telemetry"}},"sentForAnalysis":{"title":"Sent for analysis (redacted)","items":{"sanitizedPayloads":"Sanitized source/config payloads for hosted workspace review, raw advanced scans, and review_diff","packageDeps":"Package dependencies and safe config metadata","mcpSummaries":"Privacy-safe MCP run summaries (counts, durations, hashed workspace identity)","findingIds":"Finding IDs and governance feedback metadata"}},"privacyReportNote":"Run boringsec_privacy_report in Claude Code for a full data-flow breakdown per tool."},"mcpCta":{"title":"View MCP Usage Statistics","description":"Open the MCP Cockpit for active devices, workspace health, findings, guidance, and privacy boundaries","button":"MCP Cockpit"},"apiKeyCta":{"title":"Need credentials for CI?","description":"MCP uses device auth; CI uses standard API keys","button":"Manage Keys"}}},"admin":{"nav":{"main":{"dashboard":"Dashboard","users":"Users","subscriptions":"Subscriptions","compensations":"Compensations","extraUsage":"Extra Usage"},"analytics":{"sectionLabel":"Analytics","traffic":"Traffic","anonymousScans":"Scans","mcpConsole":"MCP Console"},"communication":{"sectionLabel":"Communication","announcements":"Announcements","emailCampaigns":"Email Campaigns"},"system":{"sectionLabel":"System","capabilities":"Capabilities","auditLogs":"Audit Logs"}},"sidebar":{"title":"Admin","panel":"Panel","superAdminMode":"Super Admin Mode","actionsLogged":"All actions are logged and audited.","backToDashboard":"Back to Dashboard","userDashboard":"User Dashboard","endAdminSession":"End Admin Session","signOutCompletely":"Sign out completely"},"layout":{"superAdminMode":"Super Admin Mode","allActionsLogged":"- All actions are logged"},"usage":{"title":"Extra Usage Management","description":"Monitor and manage metered usage across all users"},"dashboard":{"title":"Admin Dashboard","description":"Platform analytics and insights","tabs":{"overview":"Overview","traffic":"Traffic","users":"Users","revenue":"Revenue","product":"Product","engagement":"Engagement","anonymous":"Scans"},"cards":{"userGrowth":{"title":"User Growth","description":"New signups and active users over time"},"recentUsers":{"title":"Recent Users","description":"Latest signups"},"recentSubscriptions":{"title":"Recent Paid Subscriptions","description":"Latest upgrades"},"viewAll":"View All"}},"users":{"title":"Users","filters":{"allTiers":"All Tiers"},"table":{"user":"User","tier":"Tier","email":"Email","createdAt":"Created","actions":"Actions"},"changeTier":{"title":"Change Subscription Tier","description":"Update the subscription tier for {email}","currentTier":"Current Tier","newTier":"New Tier","reason":"Reason (optional)","updating":"Updating...","updateButton":"Update Tier","cancel":"Cancel","sameTierError":"Please select a different tier","button":"Change Tier"},"impersonate":{"button":"Impersonate","confirm":"Impersonate this user?"},"detail":{"back":"Back","subscription":"Subscription","domains":"Domains","teams":"Teams","apiKeys":"API Keys","userInfo":"User Information","accountDetails":"Account details and settings","email":"Email","name":"Name","role":"Role","joined":"Joined","verified":"Verified","notSet":"Not set","subscriptionDetails":"Subscription Details","status":"Status","scansUsed":"Scans Used","stripeCustomer":"Stripe Customer","adminActions":"Admin Actions","resetScanCount":"Reset Scan Count","addCompensation":"Add Compensation","suspendUser":"Suspend User","activity":"Activity","domain":"Domain","score":"Score","lastScan":"Last Scan","never":"Never","noDomains":"No domains","team":"Team","teamRole":"Role","teamJoined":"Joined","noTeams":"Not a member of any teams","keyName":"Name","keyPrefix":"Key","keyStatus":"Status","keyLastUsed":"Last Used","noApiKeys":"No API keys","action":"Action","resource":"Resource","time":"Time","noActivity":"No activity recorded","keyActive":"Active","keyRevoked":"Revoked"}},"auditLogs":{"title":"Audit Logs","table":{"action":"Action","user":"User","details":"Details","time":"Time"}},"announcements":{"title":"Announcements","description":"Manage platform-wide announcements","error":"Announcement action failed","table":{"announcement":"Announcement","type":"Type","target":"Target","status":"Status","from":"From: {date}"},"form":{"editTitle":"Edit Announcement","newTitle":"New Announcement","titleLabel":"Title","contentLabel":"Content","typeLabel":"Type","types":{"info":"Info","warning":"Warning","maintenance":"Maintenance","feature":"Feature","promotion":"Promotion"},"optionsLabel":"Options","targetTiersLabel":"Target Tiers (empty = all users)","startsAtLabel":"Starts At","expiresAtLabel":"Expires At (optional)"},"delete":{"title":"Delete announcement","confirm":"Are you sure you want to delete this announcement?","cancel":"Cancel"}},"emails":{"title":"Email Campaigns","description":"Create and send email campaigns to users","table":{"campaign":"Campaign","target":"Target","status":"Status","recipients":"Recipients","created":"Created","actions":"Actions"},"form":{"newTitle":"New Email Campaign","newDescription":"Create an email campaign to send to your users.","nameLabel":"Campaign Name","subjectLabel":"Subject Line","targetTiersLabel":"Target Tiers (empty = all users)","htmlContentLabel":"HTML Content","creating":"Creating...","createDraft":"Create Draft"},"confirm":{"sendTitle":"Send campaign","deleteTitle":"Delete campaign","cancel":"Cancel"}},"capabilities":{"title":"Capabilities","description":"Manage platform feature flags and capabilities","table":{"feature":"Feature","enabled":"Enabled","tier":"Min Tier","actions":"Actions"}},"mcp":{"title":"MCP Console","description":"Adoption funnel, device posture, CI uptake, findings pressure, governance, and feedback loops for BoringSec MCP.","stats":{"totalCalls":"Total MCP Calls","activeDevices":"Active Devices","successRate":"Success Rate","avgLatency":"Avg Latency"},"table":{"tool":"Tool","user":"User","device":"Device","duration":"Duration","status":"Status","timestamp":"Time"}},"traffic":{"title":"Traffic Analytics","description":"Website traffic and visitor statistics by country","stats":{"pageViews":"Page Views","uniqueVisitors":"Unique Visitors","scansStarted":"Scans Started","conversionRate":"Conversion Rate"}},"anonymousScans":{"title":"Scans","description":"Anonymous and private security scans","cardTitle":"All Scans","viewAll":"View All","topCountries":"Top Countries","noCountryData":"No country data yet","recentTitle":"Recent Scans","noScansYet":"No scans yet","totalScansAvgScore":"{total} total scans | Avg score: {avg}"},"compensations":{"title":"Compensations","description":"Manage user compensations and credits","newButton":"New Compensation","noCompensations":"No compensations yet","table":{"user":"User","type":"Type","amount":"Amount","reason":"Reason","createdBy":"Created By","date":"Date","status":"Status","created":"Created","actions":"Actions"},"create":{"title":"Add Compensation","userLabel":"User Email","amountLabel":"Credits","reasonLabel":"Reason","submit":"Add Credits"},"status":{"applied":"Applied","pending":"Pending","applying":"Applying...","apply":"Apply","manualStripe":"Manual in Stripe"},"form":{"title":"New Compensation","description":"Create a compensation for a user (credits, refund, or tier upgrade).","userLabel":"User","typeLabel":"Type","newTierLabel":"New Tier","reasonLabel":"Reason (visible to user)","internalNoteLabel":"Internal Note (optional)","creating":"Creating...","create":"Create","cancel":"Cancel","searching":"Searching...","change":"Change"}},"subscriptions":{"title":"Subscriptions","description":"View and manage all user subscriptions","paidTitle":"Paid Subscriptions ({count})","noPaidSubscriptions":"No paid subscriptions yet","tiers":{"free":"Free","pro":"Pro","business":"Business","enterprise":"Enterprise"},"table":{"user":"User","tier":"Tier","status":"Status","renewsAt":"Renews At","scansUsed":"Scans Used","updated":"Updated","mrr":"MRR","actions":"Actions"},"filters":{"allTiers":"All Tiers","allStatuses":"All Statuses"}}},"emails":{"reportDelivered":{"subject":"Your security report for {hostname} is ready","headline":"Your security report is ready","intro":"We scanned {hostname} and found: {critical} critical, {high} high, and {medium} medium issues.","securityScore":"Security score","scoreUnavailable":"Score unavailable","manualReviewRequired":"Manual review required","topPriorities":"Top 3 priorities","viewOnline":"View full report online","orPdf":"Or open the attached PDF.","supportNote":"Need help? Reply to this email or contact {email}","attentionFirst":"What needs attention first","moreFindings":"+{count} more findings, each with severity and a fix, are in your full report.","detailedUpsell":"The full report lists every finding. Unlock the detailed report for step-by-step fixes and compliance mapping.","eyebrow":"Security report"},"purchaseReceipt":{"subject":"Your BoringSec receipt","headline":"Your BoringSec receipt","thanks":"Thank you for your purchase. Here are the details for your records.","scanDomain":"Scan domain:","reportId":"Report ID:","purchaseId":"Purchase ID:","package":"Package:","amountPaid":"Amount paid:","paymentReference":"Payment reference:","purchased":"Purchased:","vatNote":"For VAT receipt details, contact support@boringsec.com."},"creditsIssued":{"subject":"Your BoringSec credits are ready","headline":"Credits added to your account","body":"Your remaining scan credits are stored in your account and valid for 365 days. Sign in to use them on any domain.","signIn":"Sign in"},"creditExpiring":{"subject":"Your BoringSec credits expire soon","headline":"Your scan credit expires soon","body":"One of your unused scan credits expires on {expiryDate}. Use it now to scan a new domain or rescan a previously analyzed one.","scanNow":"Scan now"},"refundConfirmation":{"subject":"BoringSec refund confirmed","headline":"Your BoringSec refund is processed","body":"Your refund has been processed successfully. The associated report (ID: {reportShortId}) is now locked. Funds will appear in your account within 5-10 business days, depending on your bank.","support":"Questions? Email support@boringsec.com"},"retentionNudge":{"step0":{"subject":{"a":"Your BoringSec report for {hostname} is saved","b":"Quick heads-up about {hostname}"},"body":{"a":"We saved the locked report for {hostname}. You can return to checkout and unlock the full findings, fix steps, AI prompts, and PDF.","b":"Your security scan for {hostname} is ready and waiting. Unlock the full report to see every finding with step-by-step remediation."},"headline":{"a":"Your report is saved","b":"Finish unlocking your report"}},"step1":{"subject":{"a":"{hostname}: security issues worth reviewing","b":"We found {criticalCount} critical issues on {hostname}"},"body":{"a":"The preview shows {criticalCount} critical and {highCount} high-severity issues. The full report explains impact and exact remediation steps.","b":"{criticalCount} critical issues are waiting in your saved report for {hostname}. Each one includes an exploit description and a step-by-step fix."},"headline":{"a":"Security issues worth reviewing","b":"Critical issues found on your site"}},"step2":{"subject":{"a":"Prioritize the risky findings on {hostname}","b":"Your highest-risk items on {hostname} are still unlocked"},"body":{"a":"Start with the highest-risk items first. The full report orders fixes by severity and includes copy-ready prompts for Cursor, Lovable, Claude, Bolt, and v0.","b":"The report for {hostname} ranks every finding by risk. Unlock it to get AI-ready fix prompts you can paste directly into your coding tool."},"headline":{"a":"Prioritize the risky findings","b":"Your highest-risk items are waiting"}},"step3":{"subject":{"a":"What the full BoringSec report includes","b":"Fix steps, AI prompts, PDF — still waiting for you"},"body":{"a":"Unlocking includes full descriptions, exploit context, compliance mapping, AI fix prompts, downloadable PDF, and email delivery.","b":"The full {hostname} report gives you everything: exploit context, compliance mapping, one-click AI fix prompts, and a downloadable PDF you can share with your team."},"headline":{"a":"Everything in the full report","b":"Fix steps, AI prompts, and PDF"}},"step4":{"subject":{"a":"Last reminder for {hostname}","b":"Your saved report for {hostname}"},"body":{"a":"This is the final reminder for your saved report. The preview stays available from the link below.","b":"The {hostname} report is still saved and available. This is the last reminder you will receive about it."}},"unlockCta":"Unlock full report","unsubscribeNote":"You're receiving this because you scanned {hostname}. {unsubscribeLink}.","unsubscribeLink":"Unsubscribe"},"retestConfirmation":{"subject":"Good news: {category} issue resolved on {hostname}","heading":"Issue no longer detected on {hostname}","body":"A fresh automated scan of {hostname} confirms that the previously flagged {category} issue is no longer detected. No further action is required on our part.","unsubscribeLink":"Unsubscribe"},"replyBranch":{"report":{"subject":"Your security report for {hostname}","heading":"Here is how to access your full security report","body":"The full private technical report for {hostname} includes confirmed findings, severity ratings, evidence collected, and step-by-step remediation guidance. To receive access, reply to this email or follow the link below."},"remediation":{"subject":"Remediation support options for {hostname}","heading":"BoringSec remediation support options","body":"We can assist with remediation of the issues found on {hostname}. Options include advisory review, direct remediation assistance, and retest-only packages. Reply to this email to discuss which option works best for you."},"contact":{"subject":"Could you help us reach the right contact for {hostname}?","heading":"Could you help us reach the right contact?","body":"We are trying to reach the security or technical team responsible for {hostname}. If you are not the right person, we would appreciate it if you could forward this message or let us know the correct contact. Thank you."},"unsubscribeLink":"Unsubscribe from notices for {hostname}","whyReceived":"You're receiving this in response to outreach about a security issue on {hostname}."},"ownerNotification":{"exposure":{"initial":{"subject":"Security notice for {hostname}","heading":"Publicly accessible {category} detected on {hostname}","body":"Our automated scan of {hostname} found a publicly accessible {category}. We recommend verifying this is intentional and restricting access if it should not be public."},"followup":{"subject":"Follow-up: security notice for {hostname}","heading":"Follow-up: publicly accessible {category} on {hostname}","body":"This is a follow-up to our earlier notice. Our scan of {hostname} still shows a publicly accessible {category}. We encourage you to review and restrict access as appropriate."},"final":{"subject":"Final notice: security scan result for {hostname}","heading":"Final notice: {category} accessible on {hostname}","body":"This is our final automated notice. Our scan of {hostname} detected a publicly accessible {category}. No further messages will be sent. The full technical details are available in the report linked below."}},"posture":{"initial":{"subject":"Security hardening suggestions for {hostname}","heading":"Configuration weaknesses found on {hostname}","body":"Our scan of {hostname} found {category} configuration weaknesses we can help you harden. The full report includes step-by-step guidance."},"followup":{"subject":"Follow-up: security suggestions for {hostname}","heading":"Follow-up: configuration review for {hostname}","body":"This is a follow-up to our earlier message about {hostname}. Our scan still shows {category} configuration weaknesses. We are happy to help you address them."},"final":{"subject":"Final note: security suggestions for {hostname}","heading":"Final note: security hardening for {hostname}","body":"This is our final automated message about {hostname}. The scan flagged {category} configuration weaknesses. No further messages will be sent. The full report is available below."}},"viewReport":"View detailed report","whyReceived":"You received this because our automated scan of your public domain {hostname} flagged a security issue, and we are notifying the domain owner.","detailedReport":"View the full security report for detailed findings and remediation guidance.","unsubscribeLink":"Unsubscribe","report":{"gradeLabel":"Grade","scoreLabel":"Security score","topFindings":"Top findings","weakest":"Weakest areas","more":"+{count} more in the full report","freePreview":"Free preview · no sign-up required","scanLabel":"Security scan","targetLabel":"Target","observedAt":"Observed at","howWeCheck":"How we check","dataSources":"Findings are cross-checked against VirusTotal, Google Safe Browsing and the OSV vulnerability database.","standards":"Checks follow OWASP guidance and the SPF, DMARC, DKIM, HSTS and TLS standards.","mission":"BoringSec continuously scans the web to help make the internet safer for everyone.","scoreUnavailable":"Score unavailable","manualReviewRequired":"Manual review required","unavailablePreheader":"Security scan of {hostname} needs manual review — the score could not be verified automatically.","preheader":"Security scan of {hostname} scored {grade} ({score}/100) — here is what we found and how to fix it."}},"seoAuditDelivered":{"subject":"Your SEO audit for {hostname} is ready","headline":"Your SEO audit is ready","aiReadinessCallout":"You scored {score}/100 on AI-search readiness","aiReadinessSubtext":"Here are the top priorities to improve your visibility in AI-powered search.","intro":"We crawled {pagesCrawled} pages on {hostname} and completed a full 8-category SEO audit.","topPrioritiesLabel":"Top priorities to fix","viewOnline":"Open the full report online","attachedPdfNote":"Or open the attached PDF for the full report with code fixes.","supportNote":"Need help? Reply to this email or contact {email}"},"freeAuditConfirmation":{"subject":"Confirm report notifications for {hostname}","headline":"Confirm your email","intro":"Confirm this address to receive the report-preview link for {hostname} when the scan is ready.","button":"Confirm report notifications","expires":"This confirmation link expires in 30 minutes and can be used once.","ignore":"If you did not request this scan, ignore this email. No report or marketing messages will be sent."},"freeAudit":{"subject":"{emoji} Initial security report preview for {hostname} — Grade {grade}","subjectIncomplete":"🛡️ Initial security checks available for {hostname}","subtitle":"Security Scanner","score":"Score: {score}/100","scoreIncomplete":"Assessment in progress","pendingBadge":"PENDING","critical":"Critical","high":"High","medium":"Medium","messageIssues":"The initial checks found {count} security issues that need your attention. Open the report preview for the available details; deeper Nuclei, ZAP, and Medusa scans may still be running.","messageClean":"The initial checks show a strong security posture. Open the report preview for the available results; deeper Nuclei, ZAP, and Medusa scans may still be running.","messageIncomplete":"Completed checks have not confirmed any critical, high, or medium findings. This is not a clean result: some checks are still running or need a rerun. Open the report preview for the exact status of every scanner.","viewFullReport":"View initial report preview","orCopyLink":"Or copy this link:","accessNotice":"⏰ This report preview stays accessible for {days} days. Full detailed findings may require an unlock.","footerRequested":"You’re receiving this email because you previously confirmed transactional report notifications for this requested BoringSec scan.","footerQuestions":"Questions? Reply to this email or visit {domain}","footerTagline":"© {year} BoringSec. Security costs nothing. A breach costs everything."}},"pdf":{"cover":{"title":"Security Audit Report","lightTitle":"BoringSec Light Report","scoreLabel":"Security score","scannedOn":"Scanned {date}","higherIsBetter":"Higher is better","reportId":"Report ID","grade":"{grade} grade · {score}/100"},"summary":{"executiveSummary":"Executive summary","findingsSummary":"Findings summary","issueSummary":"Issue summary","totalFindings":"{count, plural, one {# issue} other {# issues}} found (info findings excluded from this summary).","passedChecks":"Passed checks"},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info","passed":"Passed checks"},"issues":{"howToFix":"How to fix","exploitDetails":"Exploit details","noIssues":"No issues found in this category."},"categories":{"headers":"HTTP Headers","ssl":"SSL/TLS","dns":"DNS Security","cookies":"Cookies","cors":"CORS","exposure":"Exposure","injection":"Injection & XSS","auth":"Authentication"},"techStack":{"title":"Technology Stack","detected":"Detected Technologies"},"quickWins":{"title":"Quick Wins","description":"Highest-impact fixes to tackle first"},"teaser":{"title":"Top findings preview","description":"The 3 highest-severity issues found for {hostname}. Descriptions are truncated.","lightReportNote":"This light report shows finding titles only. Fix steps, code samples, and detailed recommendations are available in the full report.","getFullReport":"Get full report with fix steps at boringsec.com","getFullReportWithPrice":"Get full report with fix steps at boringsec.com — {price}+"},"footer":{"page":"Page {pageNumber} of {totalPages}","reportId":"Report ID"},"watermark":{"preview":"PREVIEW","light":"LIGHT REPORT"}},"paywall":{"emailModal":{"title":"Email for delivery","body":"We'll email your full report and PDF after payment. Registration is optional.","marketingConsentLabel":"Send me report reminders and security tips if I do not finish checkout.","marketingConsentNote":"You can unsubscribe in one click.","continueToPayment":"Continue to payment","cancel":"Cancel"},"totalCost":"Total cost:","oneTimePayment":"One-time payment · no subscription","unlockFullReport":"Unlock full report","buyReport":"Buy report","buyPackage":"Buy package","seePackages":"See available packages","saveWithPackage":"Save with a package (10 reports for {price})","fullReportLocked":"Full report locked","payFirstNudge":"Pay now, then download the completed report as soon as the scan finishes.","contactFirstNudge":"Save the report to your inbox before unlocking the full findings.","teaserFirstNudge":"Review the highest-risk teaser, then unlock the full fix list.","payFirstHeadline":"Unlock the full security report for {domain}","payFirstSubline":"Critical findings, fix steps, and PDF — instant access after payment.","downloadLightPdf":"Or download the free 3-page summary PDF"},"cookies":{"title":"Cookie Settings","description":"We use cookies to improve your experience and for analytics. You can customize your preferences below.","privacyPolicyLink":"Privacy Policy","customizePreferences":"Customize preferences","categories":{"necessary":{"title":"Necessary","description":"Required for the website to function (authentication, security)"},"analytics":{"title":"Analytics","description":"Help us understand how you use the website (Google Analytics)"},"marketing":{"title":"Marketing","description":"Used for advertising and conversion tracking (Google Ads)"}},"dataTransferNote":"Analytics and marketing cookies may transfer data to the United States. By enabling these, you consent to this transfer.","learnMore":"Learn more","buttons":{"rejectAll":"Reject All","savePreferences":"Save Preferences","acceptAll":"Accept All"}},"unsubscribe":{"title":"You are unsubscribed","description":"We will not send more report recovery emails for this address. Transactional payment and delivery emails can still be sent if you make a purchase.","backToHome":"Back to BoringSec"},"errors":{"notFound":{"title":"Page not found","description":"The page you are looking for does not exist or has been moved.","cta":"Go home"},"serverError":{"title":"Something went wrong","description":"An unexpected error occurred. Please try again.","cta":"Try again"},"unauthorized":{"title":"Access denied","description":"You do not have permission to access this page.","cta":"Sign in"},"rateLimited":{"title":"Too many requests","description":"You have made too many requests. Please wait a moment and try again."}},"scan":{"grade":{"a":"A","b":"B","c":"C","d":"D","f":"F"},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info","passed":"Passed"},"categories":{"headers":"Security Headers","ssl":"SSL/TLS","dns":"DNS Security","cookies":"Cookies","cors":"CORS","exposure":"Exposure","injection":"Injection & XSS","auth":"Authentication","secrets":"Secret Detection","database":"Database Security","platform":"Platform & Tech"},"result":{"viewReport":"View Report","shareReport":"Share Report","rescan":"Re-scan","download":"Download PDF","shareTitle":"My BoringSec Security Report","shareDescription":"I scored {score}/100 on BoringSec security scan. Check your score too!"},"share":{"title":"Share Report","description":"Share this security report with others","copyLink":"Copy link","copied":"Copied!","twitterText":"I scored {score}/100 on my security audit. Check yours at boringsec.com"}},"leaderboard":{"title":"Security Leaderboard","description":"Top-scoring websites from our security scanner","eyebrow":"Community Rankings","table":{"rank":"Rank","domain":"Domain","score":"Score","grade":"Grade","scannedAt":"Scanned"},"empty":{"title":"No entries yet","description":"Scan your domain and opt in to appear on the leaderboard."},"badge":{"new":"New","verified":"Verified"},"optIn":"Appear on Leaderboard","optOut":"Remove from Leaderboard","hero":{"eyebrow":"Security Rankings","headline":{"security":"Security","leaderboard":"leaderboard."},"subline":"Top websites ranked by security score. Join the elite."},"stats":{"sitesRanked":"Sites Ranked","averageScore":"Average Score","aGrades":"A+ & A Grades","perfectScore":"Perfect Score"},"search":{"placeholder":"Search domains...","allGrades":"All Grades","aPlusOnly":"A+ Only","aOnly":"A Only","bOnly":"B Only","cOnly":"C Only","dOnly":"D Only","fOnly":"F Only"},"noFound":"No domains found","firstJoin":"Be the first to join the leaderboard!","tryAgain":"Try a different search or filter.","scanYourSite":"Scan Your Site","cta":{"heading":"Want to appear on the leaderboard?","body":"Scan your website and opt-in to showcase your security grade.","button":"Start Free Scan"}},"badge":{"title":"Security Badge","description":"Add a BoringSec security badge to your website","eyebrow":"Prove your security","hero":{"headline":"Show visitors","headlineSub":"you take security seriously.","description":"Embed a live security badge that updates automatically when you rescan."},"variants":{"title":"Badge Styles","light":"Light","dark":"Dark","compact":"Compact"},"embed":{"title":"Embed Code","copy":"Copy","copied":"Copied!"},"preview":{"title":"Preview","liveBadge":"Live badge"},"powered":"Security by BoringSec","verifiedBy":"Scanned by BoringSec","heroLabel":"Security Badge Widget","heroLine1":"Show your","heroLine2":"security score.","heroDescription":"Display a live security badge on your website. Build trust with visitors by showing your commitment to security.","generator":{"title":"Badge Generator","description":"Customize your badge and get the embed code"},"form":{"domainLabel":"Your Domain","domainHelp":"Enter your domain without http:// or www.","styleLabel":"Style","styleFull":"Full","styleMinimal":"Minimal","themeLabel":"Theme","themeDarkOnly":"Light & Dark","themeNote":"Choose the badge theme that fits your site."},"previewNote":"A grade is published only for a verified domain with current, complete evidence. Partial and stale scans remain clearly labelled until coverage settles or a re-scan completes.","embedTabs":{"imageUrl":"Image URL"},"copyAria":{"copyHtml":"Copy HTML embed code","htmlCopied":"HTML embed code copied","copyMarkdown":"Copy Markdown embed code","markdownCopied":"Markdown embed code copied","copyUrl":"Copy badge image URL","urlCopied":"Badge image URL copied"},"examples":{"title":"Badge Examples","fullTitle":"Full Style","fullDescription":"Best for footers and about pages","minimalTitle":"Minimal Style","minimalDescription":"Best for headers and README files","score":"Score: {score}/100","sample":"Sample","verifiedMonitored":"Verified domain · monitored","sampleCurrent":"Sample · current"},"faq":{"title":"Frequently Asked Questions","items":[{"q":"How often does the badge update?","a":"The badge is cached for 24 hours. When you run a new scan on your domain, the badge will update automatically."},{"q":"What if my site hasn't been scanned?","a":"The badge will show \"Not Scanned\" until you run your first scan. Visit our homepage to scan your site for free."},{"q":"Can I use the badge on any website?","a":"Yes! The badge can be embedded on any website, README file, or documentation. It's served with CORS headers that allow embedding anywhere."},{"q":"Is there an API limit?","a":"Badge requests are cached at the edge, so there's no practical limit for normal usage. The badge is designed to handle high traffic websites."}]},"cta":{"titleLine1":"Ready to show your","titleLine2":"security?","subtitle":"Scan your site first to get your security grade, then add the badge.","scanCta":"Scan Your Site","pricingCta":"View Pricing"},"alt":{"score":"Security Score","preview":"Security Badge Preview"}},"compare":{"title":"Compare Security Scores","description":"Side-by-side security comparison of two websites","eyebrow":"Security Comparison","labelEyebrow":"Side-by-side analysis","hero":{"headline":"Compare","headlineSub":"security scores.","titleLine1":"Compare","titleLine2":"websites.","subtitle":"See how your site stacks up. Compare security scores side by side."},"form":{"domain1Placeholder":"yoursite.com","domain2Placeholder":"competitor.com","domainInputLabel":"Domain {number}","compareButton":"Compare","comparing":"Comparing...","addSite":"Add Site","removeDomain":"Remove domain","loading":"Loading...","scanning":"Scanning {count}...","scanningCount":"{count}..."},"results":{"winner":"{domain} wins","tied":"Tied","betterBy":"{points} points better","viewReport":"View Full Report","averageScore":"Average Score","best":"Best","needsWork":"Needs Work","pointsSuffix":"/100 points","scanFailed":"Scan failed","tryAgain":"Try Again","categoryBreakdown":"Category Breakdown","emptyState":"Enter domains above and click Compare to see results","scanningStatus":"Scanning...","categoryHeader":"Category","errorGeneric":"An error occurred","errorScanFailed":"Scan failed","errorNeedTwoDomains":"Please enter at least 2 domains to compare.","errorCompareFailed":"Failed to compare domains","reportsReady":"{ready} / {total} reports ready","reportsCount":"{count, plural, one {# report} other {# reports}}","scoreOutOfHundred":"{score}/100","noWinnerYet":"No winner yet","criticalCount":"{count, plural, one {# critical finding} other {# critical findings}}","criticalExposureNone":"No critical findings","ready":"Ready","reportPending":"Report link is being prepared","scanTimedOut":"The scan is taking longer than expected. Please try again.","scoreUnavailable":"The scan completed, but no reliable score is available."},"locked":{"eyebrow":"Benchmark matrix","sample":"Sample","accessLabel":"Detailed report","title":"Unlock the full comparison matrix","description":"Reveal category differences, issue counts, export-ready findings, and remediation steps for every compared domain.","cta":"Unlock detailed reports"},"categories":{"overall":"Overall Score","headers":"Headers","ssl":"SSL","dns":"DNS","cookies":"Cookies","cors":"CORS","exposure":"Exposure","subdomains":"Subdomains"}},"seoReport":{"fullReport":{"eyebrow":"SEO Audit","scanned":"scanned {date}","seoScore":"SEO score","aiReadiness":"AI readiness","aiBotsLabel":"GPTBot · Claude · Perplexity","totalFindings":"{count, plural, one {# total finding} other {# total findings}}","withAutoFix":"{count} with auto-fix","stackLabel":"stack: {stack}","sections":"Sections","estimatedReadingTime":"Estimated reading time","readingMinutes":"{count} min","handOffTeam":"Hand off to your team","seoDriftsTitle":"SEO drifts. Re-audit every month.","seoDriftsBody":"Core Web Vitals, AI-bot accessibility, and competitor signals shift weekly. Subscribers can run audits on-demand or enable monthly auto-delivery.","generatedBy":"generated by","scanIdLabel":"scanId:","backToHome":"back to home","gradeLabel":"grade {grade}","findingCount":"{count, plural, one {# finding} other {# findings}}","categoryScore":"score {score}/{max}","categoryScoreUnavailable":"score unavailable","audienceCopy":"Long-form audit covering {pages, plural, one {# crawled page} other {# crawled pages}} across 8 categories — security headers, AI-search readiness, schema, performance, accessibility.","severity":{"critical":"critical","high":"high","medium":"medium","low":"low","info":"info"}},"locked":{"sampleFindings":"Sample findings — 1 per category"},"scanning":{"headline":"SEO Audit in progress","phaseCrawling":"Crawling pages","phaseAnalyzing":"Analyzing SEO signals","phaseScoring":"Scoring categories","completeLoading":"Scan complete! Loading report…","failedTitle":"Scan failed","failedBody":"The SEO scan failed. Please try again.","failedDefault":"Something went wrong. Please try scanning again.","tryAgain":"Try again","timeoutTitle":"Taking longer than expected","timeoutBody":"The crawl is still running. Large sites can take a few minutes.","keepWaiting":"Keep waiting","progress":"Progress","pagesCrawled":"{fetched} / {total} pages crawled","largerSitesNote":"This may take 30–120 seconds for larger sites"},"preview":{"hero":{"pagesCrawled":"{count, plural, one {# page} other {# pages}} crawled","seoScore":"SEO Score","aiReadinessScore":"AI-Search Readiness","completeEyebrow":"SEO Audit Complete","issuesFound":"{count, plural, one {# SEO issue found on {hostname}} other {# SEO issues found on {hostname}}}","auditCompleteFor":"SEO audit complete for {hostname}","criticalSummary":"{count, plural, one {# critical} other {# critical}}","highSummary":"{count, plural, one {# high-severity} other {# high-severity}}","totalSummary":"{count, plural, one {# total} other {# total}}","issuesNeedAttention":"issues need attention.","readinessScoreLine":"AI-search readiness score:"},"aiReadiness":{"headline":"AI-Search Readiness","badge":"NEW","subline":"AI engines route a growing share of search traffic in 2026 — your site must opt in to be cited by ChatGPT, Claude, and Perplexity.","botAllowed":"Allowed","botBlocked":"Blocked","llmsTxtPresent":"Present","llmsTxtMissing":"Missing","botsAllowed":"{allowed}/{total} bots allowed","crawlersBlocked":"{count, plural, one {# AI crawler blocked} other {# AI crawlers blocked}}","allCrawlersAllowed":"All AI crawlers allowed","footerNudge":"AI engines route a growing share of search traffic in 2026 — your site needs to opt in to be cited by ChatGPT, Claude, and Perplexity."},"crawlSummary":{"pagesCrawled":"Pages crawled","brokenLinks":"Broken links","redirectChains":"Redirect chains","orphans":"Orphan pages","noH1":"Pages without H1"},"categories":{"ai-readiness":"AI / Generative Search","technical-seo":"Technical SEO","on-page":"On-Page SEO","content-quality":"Content Quality","structured-data":"Structured Data","performance":"Performance & CWV","mobile-a11y":"Mobile & Accessibility","international":"International SEO"},"lockedFindings":"+{count, plural, one {# more finding} other {# more findings}} in {category}","codeFixPreview":{"headline":"Copy-paste code patches included","subline":"Every issue includes a fix in your stack — Next.js, React/Vite, or plain HTML. Copy, paste, ship."},"sample":{"howToFix":"How to fix"}},"paywall":{"headline":"Unlock the full SEO audit","subline":"Get every finding, code patches, and the PDF report","includes":["Full 100-page crawl with site-wide insights","AI-search readiness deep-dive (GPTBot, Claude, Perplexity)","Code patches for Next.js / React / HTML","Schema.org structured-data validation","Performance + Core Web Vitals across page templates","PDF report delivered to your inbox"],"singleReport":"Single report","oneTimePayment":"One-time payment · no subscription","unlockFullAudit":"Unlock Full SEO Audit","firstPurchaseBadge":"First purchase · Save {percent}%","firstPurchaseSave":"You save {amount}","instantDelivery":"Instant access · PDF + email delivery","or":"OR","seePackages":"See multi-report packages (save up to 43%)","loading":"Loading…","checkoutFailed":"Checkout failed","perReport":"/ report","total":"{price} total","buySingleAudit":"Buy single audit","buyPackage":"Buy {label}","backToSingleReport":"Back to single report","badges":{"mostPopular":"Most popular","bestValue":"Best value"},"packages":{"seo_single":{"label":"1 SEO audit"},"seo_duo":{"label":"2 SEO audits"},"seo_pack10":{"label":"10 SEO audits"}},"trust":{"securePayment":"Secure payment via Stripe","pdfDelivery":"PDF + email delivery","instantAccess":"Instant access"},"refundPrefix":"Not satisfied?","emailSupport":"Email support","refundSuffix":"within 7 days for a refund."},"download":{"title":"Download report","pdf":"PDF","markdown":"Markdown","shareLink":"Copy share link","copied":"Copied"},"rescan":{"title":"SEO drifts — re-audit monthly","body":"Core Web Vitals, AI-search readiness, and competitor signals change over time. Monthly audits catch regressions before they affect rankings.","button":"Re-run audit","signupButton":"Sign up to re-run","monthlyButton":"Enable monthly auto-audit"},"monthly":{"callout":"SEO drifts. We recommend re-auditing monthly to track Core Web Vitals, AI-search readiness, and competitor delta.","cta":"Enable monthly auto-audit by email","toggleLabel":"Monthly SEO auto-audit","toggleHelp":"We will automatically run a full SEO audit once a month and email you the results.","disabled":"Monthly audits disabled","tierGate":"Upgrade to PRO or higher to enable monthly auto-audits."},"issueCard":{"howItLooksNow":"How it looks now","howItShouldLook":"How it should look","affectedUrls":"Affected URLs","showAll":"Show all ({count})","remediation":"Remediation","sources":"Sources","effortLabel":"Effort","ownerLabel":"Owner","effort":{"minutes":"~minutes","hours":"~hours","days":"~days"},"owner":{"developer":"Dev","content":"Content","devops":"DevOps"}},"monitoring":{"title":"SEO Monitoring","toggle":"Enable monthly auto-audit","email":"Report email","lastAudit":"Last audit","nextAudit":"Next audit","runNow":"Run audit now","viewLatest":"View latest report","tierGateUpgrade":"Upgrade to PRO or higher to enable SEO monitoring.","savedSuccess":"Settings saved"},"diff":{"title":"Changes since last audit","sinceLastAudit":"Since last audit on {date}","scoreDelta":"Score","aiDelta":"AI-Readiness","fixed":"Fixed","new":"New","pending":"Pending","noPreviousScan":"No previous scan to compare"},"priorityList":{"title":"Pages needing attention","intro":"Pages ranked by issue severity. Fix critical and high-severity items first.","pageHeader":"Page","issueCount":"{count, plural, one {# issue} other {# issues}}","issueCountPlural":"{count} issues","severity":"Top issue","viewIssues":"View issues","whereToStart":"Where to start","whereToStartIntro":"Pages ranked by weighted issue severity — fix the top entry first for the biggest SEO impact."},"codeFix":{"openInCursorTitle":"Open in Cursor (requires Cursor editor)","openInCursor":"Open in Cursor","copyPatchAria":"Copy code patch to clipboard","copied":"Copied","copy":"Copy"}},"seoPdf":{"cover":{"title":"SEO Audit Report","scoreLabel":"SEO score","aiReadinessLabel":"AI-Readiness score","pagesCrawledLabel":"{count} pages crawled","scannedOn":"Scanned {date}","higherIsBetter":"Higher is better","reportId":"Report ID","grade":"{grade} grade · {score}/100"},"summary":{"executiveSummary":"Executive summary","totalFindings":"{count, plural, one {# issue} other {# issues}} found across all categories.","categoryBreakdown":"Category breakdown","passedChecks":"Passed checks"},"aiReadiness":{"sectionTitle":"AI-Search Readiness","sectionSubtitle":"How discoverable you are to AI crawlers and answer engines","botGridTitle":"AI Crawler Access","allowed":"Allowed","blocked":"Blocked","llmsTxtLabel":"llms.txt","present":"Present","missing":"Missing","score":"AI-Readiness score: {score}/100"},"codeFixAppendix":{"title":"Code-Fix Appendix","subtitle":"Generated patches for issues with automated fix suggestions","noFixes":"No automated code fixes were generated for this report.","issueLabel":"Issue","fileLabel":"File","explanationLabel":"Why this fixes it"},"categories":{"ai-readiness":"AI-Search Readiness","technical-seo":"Technical SEO","on-page":"On-Page SEO","content-quality":"Content Quality","structured-data":"Structured Data","performance":"Performance & Core Web Vitals","mobile-a11y":"Mobile & Accessibility","international":"International SEO"},"severity":{"critical":"Critical","high":"High","medium":"Medium","low":"Low","info":"Info","passed":"Passed checks"},"issues":{"howToFix":"How to fix","noIssues":"No issues found in this category."},"footer":{"page":"Page {pageNumber} of {totalPages}"}},"seoIssues":{"on-page-missing-title":{"title":"{count, plural, one {# page has no tag} other {# pages have no <title> tag}}","recommendation":"Add a descriptive, unique <title> tag to every page. Titles are the primary signal search engines show in results."},"on-page-title-length":{"title":"{count, plural, one {# page has a title} other {# pages have titles}} outside 30–65 chars","recommendation":"Keep title tags between 30–65 characters including the brand suffix. Front-load important keywords."},"on-page-duplicate-titles":{"title":"{count, plural, one {# duplicate title group} other {# duplicate title groups}} detected","recommendation":"Every page should have a unique title. Duplicate titles confuse search engines about which page to rank."},"on-page-missing-meta-description":{"title":"{count, plural, one {# page is missing a meta description} other {# pages are missing a meta description}}","recommendation":"Write a concise meta description (120–160 chars) for each page. Though not a direct ranking factor, it affects click-through rates."},"on-page-desc-length":{"title":"{count, plural, one {# page has a meta description} other {# pages have meta descriptions}} outside the ideal length","recommendation":"Keep meta descriptions between 120–160 characters. Too short wastes space; too long gets truncated in SERPs."},"on-page-duplicate-meta-descriptions":{"title":"{count, plural, one {# duplicate meta description group} other {# duplicate meta description groups}} found","recommendation":"Write unique meta descriptions for every page to maximize click-through rates in search results."},"on-page-missing-h1":{"title":"{count, plural, one {# page is missing an H1 heading} other {# pages are missing H1 headings}}","recommendation":"Add one H1 per page that clearly describes the page topic. It is a strong on-page signal for search engines."},"on-page-multiple-h1":{"title":"{count, plural, one {# page has multiple H1 headings} other {# pages have multiple H1 headings}}","recommendation":"Use exactly one H1 per page. Additional H1 elements dilute the primary keyword signal."},"on-page-heading-hierarchy":{"title":"{count, plural, one {# page has skipped heading levels} other {# pages have skipped heading levels}}","recommendation":"Maintain a logical heading hierarchy (H1 → H2 → H3). Skipping levels degrades both accessibility and crawlability."},"on-page-missing-alt-text":{"title":"{count, plural, one {# image is missing alt text} other {# images are missing alt text}}","recommendation":"Add descriptive alt text to all images. Alt attributes help search engines understand image content and improve accessibility."},"on-page-weak-anchors":{"title":"{count, plural, one {# weak anchor text found} other {# weak anchor texts found}}","recommendation":"Replace generic anchor text like 'click here' or 'read more' with descriptive text that tells users and search engines what the linked page is about."},"on-page-empty-anchors":{"title":"{count, plural, one {# empty anchor found} other {# empty anchors found}}","recommendation":"Every link should have meaningful anchor text. Empty anchors provide no context to users or crawlers."},"technical-seo-non-https":{"title":"{count, plural, one {# page is served over HTTP} other {# pages are served over HTTP}}","recommendation":"Migrate all pages to HTTPS. Google uses HTTPS as a ranking signal and browsers warn users about non-secure pages."},"technical-seo-4xx-pages":{"title":"{count, plural, one {# page returns a 4xx error} other {# pages return 4xx errors}}","recommendation":"Fix or redirect broken pages. 4xx responses waste crawl budget and create a poor user experience."},"technical-seo-5xx-pages":{"title":"{count, plural, one {# page returns a 5xx error} other {# pages return 5xx errors}}","recommendation":"Resolve server errors immediately. 5xx responses signal instability to search engines and can cause de-indexing."},"technical-seo-redirect-chains":{"title":"{count, plural, one {# redirect chain detected} other {# redirect chains detected}}","recommendation":"Shorten redirect chains to a single hop. Long chains slow crawling and dilute PageRank."},"technical-seo-missing-canonical":{"title":"{count, plural, one {# page is missing a canonical tag} other {# pages are missing canonical tags}}","recommendation":"Add a canonical tag to every page to prevent duplicate-content issues and concentrate PageRank on the preferred URL."},"technical-seo-canonical-mismatch":{"title":"{count, plural, one {# page has a self-referencing canonical mismatch} other {# pages have canonical mismatches}}","recommendation":"Ensure the canonical URL exactly matches the page's canonical URL, including protocol and trailing slash."},"technical-seo-robots-txt":{"title":"robots.txt issues detected","recommendation":"Review your robots.txt to ensure you are not accidentally blocking important pages from crawlers."},"technical-seo-sitemap-missing":{"title":"XML sitemap not found","recommendation":"Create and submit an XML sitemap to help search engines discover all your important pages efficiently."},"technical-seo-sitemap-no-lastmod":{"title":"{count, plural, one {# sitemap entry is missing lastmod} other {# sitemap entries are missing lastmod}}","recommendation":"Add <lastmod> dates to sitemap entries so search engines can prioritise recently updated pages."},"technical-seo-orphaned-noindex":{"title":"{count, plural, one {# page is noindexed but has no inbound links} other {# pages are noindexed but have no inbound links}}","recommendation":"Remove orphaned noindex pages or add them to the navigation to avoid wasting crawl budget."},"ai-readiness-bot-blocked":{"title":"{bot} crawler is blocked by robots.txt","recommendation":"Allow {bot} in robots.txt to enable your content to be cited by AI answer engines."},"ai-readiness-all-major-bots-blocked":{"title":"All major AI crawlers are blocked","recommendation":"Update robots.txt to allow GPTBot, ClaudeBot, and PerplexityBot so your content can appear in AI-generated answers."},"ai-readiness-llms-txt-missing":{"title":"llms.txt file is missing","recommendation":"Add a /llms.txt file to guide AI crawlers about which content they may use and how to cite your site."},"ai-readiness-llms-txt-malformed":{"title":"llms.txt file is malformed","recommendation":"Fix the syntax errors in your llms.txt file so AI crawlers can parse it correctly."},"ai-readiness-qa-signals-missing":{"title":"Q&A signals are missing","recommendation":"Add FAQ schema or clearly structured Q&A sections. AI engines prefer content structured as direct question-answer pairs."},"ai-readiness-author-byline-missing":{"title":"{count, plural, one {# page is missing an author byline} other {# pages are missing author bylines}}","recommendation":"Add visible author attribution and link it to an author profile page. E-E-A-T signals matter for AI citation."},"ai-readiness-date-signals-missing":{"title":"{count, plural, one {# page is missing publication date signals} other {# pages are missing publication date signals}}","recommendation":"Add visible publication and last-modified dates. AI engines favour up-to-date, timestamped content."},"ai-readiness-wikidata-entity-missing":{"title":"No Wikidata entity linked for this site","recommendation":"Create or claim a Wikidata entity for your brand. Knowledge graph presence improves AI citation trustworthiness."},"structured-data-missing-jsonld":{"title":"{type} structured data is missing","recommendation":"Add {type} JSON-LD markup to help search engines understand your content type and enable rich results."},"structured-data-parse-errors":{"title":"{count, plural, one {# structured data parse error} other {# structured data parse errors}} found","recommendation":"Fix JSON-LD syntax errors. Invalid structured data is ignored by search engines and ineligible for rich results."},"structured-data-conflicting-ids":{"title":"{count, plural, one {# conflicting @id found in structured data} other {# conflicting @ids found in structured data}}","recommendation":"Ensure each entity has a unique @id across all JSON-LD blocks on the page."},"structured-data-article-incomplete":{"title":"Article schema is missing required field: {field}","recommendation":"Add the missing required fields to your Article schema to qualify for rich results in Google Search."},"structured-data-product-incomplete":{"title":"Product schema is missing required field: {field}","recommendation":"Add the missing required fields to your Product schema. Incomplete product markup cannot qualify for shopping rich results."},"structured-data-faq-incomplete":{"title":"FAQPage schema is missing required field: {field}","recommendation":"Complete the FAQPage schema with all required fields to be eligible for FAQ rich results."},"structured-data-organization-incomplete":{"title":"Organization schema is missing required field: {field}","recommendation":"Add the missing required fields to your Organization schema to improve knowledge panel eligibility."},"content-thin":{"title":"{count, plural, one {# page has thin content} other {# pages have thin content}}","recommendation":"Expand thin pages to at least 300 words of substantive content, or consolidate them into a stronger page."},"content-duplicate":{"title":"{count, plural, one {# page has near-duplicate content} other {# pages have near-duplicate content}}","recommendation":"Consolidate duplicate content with canonical tags or 301 redirects to avoid splitting ranking signals."},"content-stale":{"title":"{count, plural, one {# page has stale content} other {# pages have stale content}}","recommendation":"Refresh or redirect stale pages. Up-to-date content ranks better and earns more AI citations."},"content-reading-level":{"title":"{count, plural, one {# page has readability issues} other {# pages have readability issues}}","recommendation":"Aim for a Flesch reading score above 60. Simpler language improves engagement and AI comprehension."},"content-no-multimedia":{"title":"{count, plural, one {# page has no multimedia} other {# pages have no multimedia}}","recommendation":"Add relevant images, video, or interactive elements to increase dwell time and enrich the content signal."},"performance-psi-not-configured":{"title":"PageSpeed Insights could not be evaluated","recommendation":"Ensure your site is publicly accessible and configure a PSI API key for accurate Core Web Vitals data."},"performance-cwv-lcp":{"title":"{count, plural, one {# page has a poor LCP score} other {# pages have poor LCP scores}}","recommendation":"Improve Largest Contentful Paint to under 2.5 s by optimising images, eliminating render-blocking resources, and using a CDN."},"performance-cwv-cls":{"title":"{count, plural, one {# page has a poor CLS score} other {# pages have poor CLS scores}}","recommendation":"Reduce Cumulative Layout Shift to below 0.1 by reserving space for images and ads, and avoiding late-injected DOM."},"performance-cwv-inp":{"title":"{count, plural, one {# page has a poor INP score} other {# pages have poor INP scores}}","recommendation":"Improve Interaction to Next Paint to under 200 ms by reducing long tasks and deferring non-critical JavaScript."},"performance-render-blocking":{"title":"{count, plural, one {# render-blocking resource detected} other {# render-blocking resources detected}}","recommendation":"Defer or async-load render-blocking scripts and stylesheets to improve First Contentful Paint."},"mobile-a11y-no-viewport":{"title":"{count, plural, one {# page is missing a viewport meta tag} other {# pages are missing a viewport meta tag}}","recommendation":"Add <meta name='viewport' content='width=device-width, initial-scale=1'> to every page for correct mobile rendering."},"mobile-a11y-no-lang":{"title":"{count, plural, one {# page is missing a lang attribute} other {# pages are missing a lang attribute}}","recommendation":"Add a lang attribute to the <html> element to help screen readers and search engines identify the page language."},"mobile-a11y-headings-skip":{"title":"{count, plural, one {# page skips heading levels for accessibility} other {# pages skip heading levels for accessibility}}","recommendation":"Maintain a sequential heading structure to ensure screen readers and assistive technologies can navigate the page correctly."},"mobile-a11y-aria-issues":{"title":"{count, plural, one {# ARIA issue detected} other {# ARIA issues detected}}","recommendation":"Fix ARIA attribute misuse. Incorrect ARIA roles and attributes cause confusion for assistive technologies."},"international-hreflang-missing-return":{"title":"{count, plural, one {# hreflang tag is missing a return link} other {# hreflang tags are missing return links}}","recommendation":"Ensure every hreflang alternate includes a reciprocal link. Incomplete hreflang pairs are ignored by Google."},"international-no-x-default":{"title":"hreflang x-default tag is missing","recommendation":"Add an x-default hreflang tag to specify the default or language-selection page for international visitors."},"international-ip-redirect":{"title":"IP-based geo-redirect detected","recommendation":"Avoid IP-based redirects as Googlebot always crawls from the US. Use hreflang to serve regional content instead."}},"docs":{"layout":{"title":"Documentation","subtitle":"Everything you need to secure your AI-built projects","sections":{"gettingStarted":"Getting Started","integrations":"Integrations","features":"Features","guides":"Guides"},"items":{"overview":"Overview","scanning":"Scanning","fixTemplates":"Fix Templates","restApi":"REST API","claudeCodeMcp":"Claude Code MCP","cicdIde":"CI/CD & IDE","monitoringAlerts":"Monitoring & Alerts","compliance":"Compliance","teams":"Teams","billingUsage":"Billing & Usage","apiKeys":"API Keys","domains":"Domains","badges":"Badges","apiPlayground":"API Playground","securityScore":"Security Score","scannersReference":"Scanner Reference","seoAudit":"SEO Audit","connectedScans":"Connected Scans","repositoryArchives":"Repository ZIP Scans","aiWorkflow":"AI Workflow","quickstart":"Quickstart","understandingReports":"Your Report","mcpQuickInstall":"MCP Quick Install"},"getApiKey":"Get API Key","onThisPage":"On this page","breadcrumbHome":"Home","previous":"Previous","next":"Next"}},"legalShell":{"crumb":"legal","effective":"effective","sectionsCount":"{count, plural, one {# section} other {# sections}}","tableOfContents":"table of contents","humanQuestion":"Need to talk to a human?","plainEnglish":"in plain english","questionsOrRequests":"questions or requests","backToHome":"back to home"},"securityLanding":{"brandLabel":"BoringSec","inputLabel":"Website domain","placeholder":"myapp.com","cta":"Check my site for security issues","ctaShort":"Check site","invalidError":"Enter a valid website domain, for example myapp.com."},"whyBoringsec":{"meta":{"title":"BoringSec vs Free Security Scanners — Why We Go Deeper | BoringSec","description":"Free scanners check one thing, once. BoringSec coordinates {baseModules} URL base modules and {backgroundEngines} verified-owner background engines, then keeps watching.","ogTitle":"BoringSec vs Free Security Scanners","ogDescription":"{baseModules} URL base modules, {backgroundEngines} verified-owner background engines, continuous monitoring, and fixes you can act on."},"hero":{"eyebrow":"BoringSec vs free scanners","headline":"Free scanners check one thing.","headlineSub":"We check everything.","description":"SSL Labs, Mozilla Observatory and securityheaders.com are great at their one job. BoringSec coordinates {baseModules} URL base modules and {backgroundEngines} verified-owner background engines — and keeps watching.","stat":"Broad coverage with explicit limits","seeComparison":"See the full comparison ↓","coverage":{"title":"Categories covered in one scan","boringsecLabel":"One BoringSec scan","caption":"One BoringSec scan replaces all three free tools — and covers the categories they can't see."}},"matrix":{"eyebrow":"Side by side","headline":"What each scanner actually checks","description":"An honest comparison against {tools}. Where free tools are strong, we say so — the difference is how much one BoringSec scan covers.","capabilityHeader":"Capability","support":{"full":"Supported","partial":"Partial","none":"Not supported"},"columns":{"boringsec":"BoringSec","sslLabs":"SSL Labs","observatory":"Mozilla Observatory","securityHeaders":"securityheaders.com"},"notes":{"strong":"Strong","englishOnly":"EN only","tlsOnly":"TLS only","headersOnly":"Headers only"},"values":{"categories":{"boringsec":"{baseModules} base modules","sslLabs":"TLS only","observatory":"Headers + TLS","securityHeaders":"Headers only"}},"rows":{"categories":"Base URL modules","headers":"HTTP security headers (15+)","ssl":"Deep SSL/TLS analysis","dns":"DNS (SPF, DMARC, DKIM, CAA, DNSSEC)","secrets":"Exposed secrets & API keys","cve":"Known CVEs in your tech stack","database":"Database security (Supabase, Firebase)","gdpr":"GDPR & privacy checks","reputation":"Malware & blacklist reputation","monitoring":"Continuous monitoring over time","fixes":"Plain-language & AI-ready fixes","localized":"Reports in 10 languages","grade":"Unified A++ to F grade","automation":"API, CI/CD & Slack integration"},"coverageRow":"Categories covered","coverageOf":"of {total}"},"deepDive":{"eyebrow":"Where the difference shows","headline":"Four things a one-shot scanner can’t do","breadth":{"title":"One workflow, independent modules","description":"Headers, TLS, DNS, cookies, CORS, exposure, injection, XSS, subdomains, secrets, databases, technology CVEs, privacy, reputation and more — aggregated into a single A++ to F grade instead of three separate tools you have to run and reconcile yourself.","points":{"0":"{baseModules} base modules in one workflow","1":"One unified score & report","2":"{backgroundEngines} verified-owner background engines"}},"hidden":{"title":"Catches what header-checkers can’t","description":"Free scanners read your response headers. BoringSec reads your shipped JavaScript and infrastructure — finding exposed Stripe, AWS, Supabase and GitHub keys, open Supabase RLS and Firebase rules, and known CVEs in the libraries you actually use.","points":{"0":"Leaked API keys in your bundles","1":"Open database rules (RLS / Firebase)","2":"CVEs matched via the OSV database"}},"monitoring":{"title":"Security isn’t a one-time check","description":"A clean scan today says nothing about next week. BoringSec keeps watching — re-scanning on a schedule and alerting you to certificate expiry, defacement, new vulnerabilities, blacklisting and downtime.","points":{"0":"Scheduled re-scans from $19/mo","1":"Certificate-expiry countdown","2":"Defacement & blacklist alerts"}},"remediation":{"title":"Fix it, don’t just find it","description":"Every finding comes with a plain-language explanation, the exact evidence we observed, and a fix you can act on — including AI-ready fix prompts. And the whole report renders in the language of the site you scanned.","points":{"0":"Plain-language remediation","1":"Copy-paste AI fix prompts","2":"Localized in 10 languages"}}},"whyNotFree":{"headline":"Why free scanners aren’t enough","description":"They’re excellent spot-checks for a single dimension. They were never meant to be your whole security picture.","points":{"0":"They check one axis — you still need three or more tools to cover the basics.","1":"They’re point-in-time — no monitoring, no alerts when something changes.","2":"They can’t see leaked secrets, open databases or vulnerable dependencies.","3":"Reports are English-only and rarely tell you how to actually fix the issue."}},"trust":{"eyebrow":"We respect these tools","body":"We genuinely like {tools} — we use them too. They do their one job well, and this isn’t about replacing a good TLS or header check. It’s about everything those checks can’t see. BoringSec gives you the complete picture in one place."},"cta":{"headline":"See what one scan","headlineSub":"really finds.","description":"Free, no signup. Applicable base results appear first.","pricingLink":"Compare plans & monitoring →"}},"sampleReport":{"meta":{"title":"BoringSec sample report | Progressive evidence, fixes, and monitoring","description":"A representative BoringSec report walkthrough showing progressive scanner states, verified evidence, AI interpretation, coverage limits, fixes, retests, and Care monitoring."},"hero":{"eyebrow":"Representative walkthrough · not a live scan","title":"Evidence, fix prompts, and retest workflow in one report.","description":"Follow a report from the first verified evidence through independent deep scanners, AI-assisted remediation, re-testing, and continuous monitoring. Every value on this page is labelled as representative—not customer telemetry.","card":{"scanLabel":"Security scan · representative","partial":"Partial","baseReady":"Base report ready for review","enginesContinue":"Independent deep engines continue","confidence":"Score confidence follows verified coverage"}},"progressive":{"eyebrow":"Progressive delivery","title":"Useful evidence now. Deeper coverage without blocking the report.","description":"Base modules publish their verified observations first. Nuclei, OWASP ZAP, and Medusa keep their own state and join the same report only when their results are ready. Pending and unavailable never mean passed.","states":{"base":{"name":"Base security modules","state":"Report ready","description":"Verified URL evidence is available now."},"nuclei":{"name":"Nuclei","state":"Running","description":"Template-backed checks continue independently."},"zap":{"name":"OWASP ZAP","state":"Queued","description":"The base report does not wait for this engine."},"medusa":{"name":"Medusa","state":"Unavailable in this sample","description":"No verified Medusa result was produced, so no clean pass is inferred."}},"trustLabel":"What the reader can trust:","trustBody":"Only completed, verified scanner output can become a confirmed finding or a clean pass. The report refreshes as independent engines finish; it never invents a result to fill a gap."},"findings":{"eyebrow":"Findings","title":"Evidence is the source of truth. Interpretation stays labelled.","observedLabel":"Observed by scanner","aiLabel":"AI interpretation","critical":{"severity":"Critical","evidenceBadge":"Verified live evidence","title":"Supabase service-role key exposed in client bundle","observed":"A browser-delivered JavaScript asset contains a Supabase service-role token fingerprint. The secret value is redacted from the report.","interpretation":"Treat the token as compromised: rotate it, move privileged calls server-side, and review Supabase audit activity. This guidance does not replace the scanner evidence above."},"medium":{"severity":"Medium","evidenceBadge":"Verified HTTP evidence","title":"Content Security Policy is missing","observed":"The final HTML response did not include a Content-Security-Policy or Content-Security-Policy-Report-Only header. Response details are retained as evidence.","interpretation":"Start in report-only mode, review violations, then enforce a policy scoped to the application's actual script and connection origins."}},"passed":{"title":"Passed checks","items":{"tls":"TLS certificate is valid and not near expiry.","dmarc":"DMARC policy is present for the primary domain.","env":"No public .env file detected on common exposure paths.","malware":"No malware or defacement signal in the latest monitor check."}},"score":{"title":"Score transparency","description":"This walkthrough does not publish a made-up final score. A real report labels the score as assessed, provisional, or not assessed from its verified weighted coverage, and keeps pending, partial, and unavailable scanners visible.","base":{"label":"Base coverage","value":"Completed"},"deep":{"label":"Deep coverage","value":"Still in progress"},"unavailable":{"label":"Unavailable","value":"Never counted as passed"}},"fix":{"title":"AI fix prompt","prompt":"Remove the exposed Supabase service-role credential.\nRotate and revoke the compromised key before deployment.\nMove privileged operations into a server-only module.\nKeep only the anon key in browser-delivered code.\nAdd a build test that rejects service-role fingerprints.","note":"Generated from the verified finding context. Secrets and sensitive evidence stay redacted from the prompt."},"compliance":{"title":"Compliance mapping","description":"References help route remediation work. They do not claim certification or legal compliance.","openFixQueue":"Open fix queue","retest":"Retest after fix"},"monitoring":{"eyebrow":"Care monitoring","title":"Make this report the baseline, not the finish line.","description":"Care watches uptime, SSL, DNS, blocklists, client-side threats, defacement, and recurring deep scan results. It records verified changes and keeps incomplete scanners visible instead of turning them into false reassurance.","seeCare":"See Care monitoring","readDocs":"Read monitoring docs","historyTitle":"Honest score and finding history","historyDescription":"No past runs are fabricated for this sample. History begins after ownership verification and Care activation.","timelineAria":"Monitoring timeline","timeline":{"baseline":{"label":"Baseline","title":"Current verified report","description":"Captured after activation"},"weekly":{"label":"Weekly","title":"Compare deep results","description":"New, resolved, and changed"},"change":{"label":"On change","title":"Alert, fix, re-test","description":"Only verified regressions"}},"channels":{"email":"Email owner","slack":"Slack team","webhook":"Signed webhook"}}},"careUpsell":{"eyebrow":"Continue from this report","title":"Turn today's report into a monitored baseline","description":"Care compares future verified results with this scan, records the change history, and alerts you when the site regresses. Pending or unavailable scanners are never reported as a clean pass.","features":{"weekly":"Weekly deep scan plus continuous service checks","history":"Score and finding history after activation","notifications":"Email, Slack, and webhook notifications","retests":"Unlimited re-tests and a live security badge"},"cta":"Activate Care for this site","note":"From €29/month. Domain ownership is verified before monitoring starts.","lifecycleAria":"Care monitoring lifecycle","steps":{"baseline":{"label":"1 · Baseline","body":"This verified report"},"compare":{"label":"2 · Compare","body":"Every weekly deep scan"},"act":{"label":"3 · Act","body":"Verified regression → alert and re-test"}}},"care":{"meta":{"title":"Care monitoring for live AI-built apps | BoringSec","description":"Care keeps one live app watched with uptime, SSL, DNS, blacklist, client-threat, defacement, weekly deep scans, alerts, retests, and a live badge.","ogTitle":"Care keeps one live app watched","ogDescription":"Weekly deep scans plus lightweight monitoring and alerts for AI-built apps."},"hero":{"eyebrow":"Care monitoring","headline":"Care keeps one live app watched.","description":"Put your production site on a recurring security loop: weekly deep scans, uptime and SSL checks, DNS change detection, reputation monitoring, tamper signals, alerts, retests, and a live security badge.","startCare":"Start Care","scanFirst":"Scan first"},"console":{"title":"Live app watchlist","subtitle":"One site, multiple probe families, one actionable signal.","status":"Monitoring ready"},"watch":{"eyebrow":"What Care watches","headline":"The checks that catch launch drift and obvious regressions.","items":{"uptime":{"title":"Uptime","description":"Regular availability checks with response-time context before a silent outage becomes customer-visible."},"ssl":{"title":"SSL expiry","description":"Certificate lifetime checks so an expired cert does not break trust or checkout flows."},"dns":{"title":"DNS changes","description":"Detects material DNS record changes that can indicate misconfiguration or takeover risk."},"blacklist":{"title":"Blacklist reputation","description":"Tracks security and reputation sources so you know when a domain is listed and where to request removal."},"clientThreat":{"title":"Client-side compromise","description":"Looks for suspicious client-side signals that can point to injected scripts or dangerous page changes."},"defacement":{"title":"Defacement","description":"Compares content fingerprints and raises a signal when the live page changes in a suspicious way."},"weeklyScan":{"title":"Weekly deep security scan","description":"Runs the deeper BoringSec security audit on a recurring cadence for the monitored site."},"emergingThreats":{"title":"Emerging threat checks","description":"When a new vulnerability affects common AI-app stacks like Next.js, Supabase, Firebase, Stripe, Vercel, or popular npm packages, BoringSec checks monitored domains and tells you whether your app is likely affected."}}},"channels":{"eyebrow":"Alert channels","headline":"Get the signal where you actually work.","description":"Care is intentionally lightweight: email for the owner, Slack for the team, and webhooks for automation. No server agent and no hosted WAF claim.","items":{"email":{"title":"Email","description":"Owner-friendly alerts and report delivery without forcing a dashboard check every day."},"slack":{"title":"Slack","description":"Team-visible signals for urgent monitoring and scan-diff events."},"webhook":{"title":"Webhook","description":"Structured events for your own workflows, ticketing, or internal status systems."}}},"proof":{"eyebrow":"Honest scope","headline":"Built on BoringSec monitoring probes, not a vague platform promise.","description":"Care uses the existing BoringSec monitoring pipeline: uptime, SSL, DNS, blacklist, client-threat, defacement, and recurring scan enrollment. It is not a replacement for an enterprise WAF, EDR, or internal network scanner; it is a focused safety net for a live web app."},"cta":{"headline":"Start with a scan, then keep the site watched.","description":"Use a free preview first, unlock the report if you need fixes, or start Care when the site is already important enough to monitor continuously.","startCare":"Start Care","comparePlans":"Compare plans"}}},"now":"$D2026-07-14T07:08:11.093Z","timeZone":"UTC","children":["$L13","$L14","$L15"]}] </article></body></html>