Building a security posture scanner with Next.js and Python

Short summary

A developer built PostureGuard, a security posture scanner using Next.js, PostgreSQL, and a Python worker that checks TLS, HTTP headers, and open ports. The architecture uses the scans table as a job queue with FOR UPDATE SKIP LOCKED, avoiding a separate message broker. Domain ownership is verified via DNS TXT records, and the worker runs as a systemd service with automated nightly backups.

• •PostureGuard scans domains for TLS, HTTP security headers, and open ports with a 0-100 scoring system
• •PostgreSQL scans table doubles as job queue using FOR UPDATE SKIP LOCKED for parallel worker processing
• •DNS TXT record verification proves domain ownership before scanning; worker deployed as systemd service with automated backups

Generated with AI, which can make mistakes.