Firewall Rule Scanner
Any-any rules, exposed management ports, and shadowed deny rules in iptables, cloud SGs, and UFW configs.
NGINX & network config scanner
before misconfigs reach production.
Upload firewall rules, NGINX, Apache, HAProxy, Envoy, load balancer, and reverse proxy configs. network auto-detects the format and scans for any-any rules, missing TLS, weak ciphers, exposed admin interfaces, and internal service exposure — plus intent vs. reality gaps where names claim internal-only access but rules allow any source.
7
Scanners
.conf · .cfg · .yaml
Formats
PDF
Assessment report
What we scan
NGINX Scanner
Missing TLS, internal service exposure via proxy_pass, dangerous rewrites, and missing security headers.
Apache Scanner
Directory listing, weak TLS protocols/ciphers, and missing security headers in VirtualHost configs.
HAProxy Scanner
Insecure frontend binds, exposed stats/admin interfaces, and weak cipher configuration.
Load Balancer Scanner
Weak ciphers, plaintext listeners, and open admin endpoints on ELB/ALB and similar configs.
Reverse Proxy Scanner
Internal application exposure through public proxies and TLS termination issues on upstream connections.
Envoy Scanner
Admin interface exposure, missing TLS on listeners, insecure CORS, and excessive X-Forwarded-For trust.
API quickstart
Scan via REST with your API key — same engines as the upload form.
Example request
curl -X POST "http://api.misconfigs.com/api/v1/network?format=json&fail_on=critical,high" \ -H "X-API-Key: mc_your_key" \ -F "file=@sample/network/nginx-bad.conf"
Run a network security scan
Upload firewall, web server, proxy, or load balancer configs — or zip them together
Try demo
See it in action
Try the network intent-gap demo — upload below to see reality gaps and suggested fixes.
Click a demo — we download the zip for you, then run the scan automatically. Keep this tab open; results appear below (usually 1–2 minutes).
One free demo per day — no account. Sign in free for more demos and your own uploads.
Drag & drop your network configs here
iptables · NGINX · Apache · HAProxy · Envoy · LB · .zip · max 10 MB
Automated scans only — not a penetration test, compliance audit, or professional security advice. Results may contain false positives or miss issues. You are responsible for validating findings before acting. Terms · Privacy
The optional scan assistant and Explain actions use Google Gemini (a third-party AI). Responses are generated automatically and may be inaccurate or incomplete — not security, legal, or professional advice. Chat sends finding details, scan summaries, and your messages to Google for processing. Do not include secrets you cannot afford to disclose. Official Terms (AI section) and Privacy Policy (AI section) are the source of truth, not assistant replies.