• HEADERS
  • LINKS
  • RISKS
  • HUMAN

How to audit web server security with your AI

Connect Nmap Online to your AI client to inspect site configurations and link structures. Your agent handles the data gathering so you can focus on the analysis.

Ask AI about this page

Short answer

How can I audit web server security with my AI?

Your AI uses Nmap Online to pull HTTP headers and crawl page links. This lets you spot missing security headers or exposed paths without manual scanning. You'll get a clear view of your site's surface area.

Audit outcomes

Where your data lands.

The AI organizes the raw data into actionable categories for your review.

HEADERS

Security header gaps

The AI checks for missing or weak HTTP headers. You'll see exactly which protections like HSTS or CSP are absent.

LINKS

Site structure map

The agent crawls the site to find all reachable links. This reveals the full footprint of your web application.

RISKS

Vulnerability flags

The AI flags suspicious headers or exposed paths. It highlights the specific areas that need your attention.

HUMAN

Manual verification

The AI cannot fix the configuration or run deep penetration tests. You must manually apply the fixes to your actual environment.

The workflow

What your AI does when the request arrives.

The AI moves from raw data collection to structured security insights.

  1. Fetch headers

    The agent requests the HTTP response headers from the target URL to check for security settings.

    get_http_headers

  2. Map links

    The AI crawls the target to identify all internal and external links.

    get_page_links

  3. Analyze headers

    The agent compares the retrieved headers against security best practices.

    get_http_headers

  4. Identify paths

    The AI uses the link list to find potentially sensitive or unlinked directories.

    get_page_links

Try it

Copy these to start.

Use these prompts to begin your security audit.

Starting points

These are starting points. Replace the URLs with the specific sites you want to check.

Nmap Online Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_zzcXTxJo17l0QjaigBuLdOKCDddybQ6rHt7cdH4s/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Nmap Online capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "nmap-online-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_zzcXTxJo17l0QjaigBuLdOKCDddybQ6rHt7cdH4s/mcp"
    }
  }
}
Copy into chat04

  • Check the HTTP headers for https://example.com and tell me if any security headers are missing.

  • Crawl https://example.com to find all page links and list any suspicious paths.

  • Analyze the security configuration of https://example.com based on its HTTP headers.

  • Map the site structure for https://example.com and identify the total number of links found.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Nmap Online once, then ask.

One connection gives your AI access to these tools. Your credentials stay encrypted and the setup is handled on our end.

Connect Nmap Online to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix my server settings?

    No. The AI can only read headers and links. You have to change the settings yourself.

  • 02

    Does the AI perform active attacks?

    No. The tools only perform passive inspection by reading headers and following links.

  • 03

    Can I audit a site I don't own?

    The AI can pull the data, but you are responsible for ensuring you have permission to scan the target.

  • 04

    How does the AI see the site?

    It uses get_http_headers and get_page_links to pull data from the web via the MCP.

  • 05

    Will the AI save my scan results?

    The AI processes the data in your chat session. It does not store a permanent database of your scans.

  • More questions about Nmap Online? The Connector page answers them. See everything the Nmap Online Connector can do

Connect Nmap Online to Claude, Cursor, ChatGPT & more