An automated scanner and web dashboard for tracking TLS deployment across news organizations.
Secure the News was an open-source tool that automatically scanned news websites for TLS/HTTPS implementation and provided a web dashboard to track encryption deployment across media organizations. It helped identify security vulnerabilities in news infrastructure by monitoring certificate validity and HTTPS configuration. The project aimed to improve internet security transparency for critical public information sources.
News organizations, media security teams, digital rights advocates, and developers interested in web security monitoring and TLS deployment tracking.
It provided automated, continuous monitoring of TLS security across news websites with a public API and dashboard. As an open-source solution, it offered transparency and customization options not available in proprietary security monitoring tools.
An automated scanner and web dashboard for tracking TLS deployment across news organizations
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Regularly checked news websites for HTTPS configuration and certificate validity, as described in the automated scanner feature, enabling continuous security monitoring.
Provided a visual interface to track security status across organizations, with an interactive dashboard that displayed scan results and vulnerabilities.
Offered read-only API access to site metadata and scan results, supporting CORS for easy integration with other tools or custom dashboards.
Included sample data via the `createdevdata` command, facilitating local testing and development without needing live scan data.
The project is no longer maintained, as stated in the README, meaning no updates, bug fixes, or support, making it risky for production use.
Requires Docker, pipenv, and make commands with multiple steps for local and production environments, which can be time-consuming and error-prone.
Since retired, dependencies may not be updated, posing security risks and compatibility issues with newer systems or TLS standards.