twa is a shell script that audits a given website using nothing but bash, awk, curl, and nc. Throw it in your $PATH and see how your site(s) security stacks up.

(Note: requires Bash 4 which is not packaged with macOS because licensing. You can upgrade Bash via homebrew. Learn more here.)