HawkEye: Web Vulnerability Analysis and Security Audit Tool

Abstract

The widespread adoption of web applications has significantly increased exposure to security risks, making auto¬mated vulnerability assessment an essential component of modern software development. Although several open-source scanners provide strong detection capabilities, they typically operate inde¬pendently, require technical expertise, and produce unstructured reports, limiting their accessibility and effectiveness. This paper introduces HawkEye, a modular, web-based vulnerability audit¬ing platform designed to streamline security analysis by integrat¬ing multiple scanning tools within a unified dashboard. HawkEye uses Docker-isolated environments to orchestrate scanners and employs a Django–SQLite3 backend to manage scan workflows and result storage. The current implementation provides full integration for OWASP ZAP and Nikto, while modular support is included for incorporating Nmap, SQLMap, and Wapiti. The platform consolidates heterogeneous outputs into a standardized schema, applies CVSS-based severity classification, and gener¬ates exportable PDF/JSON reports with remediation guidance. Experimental testing on intentionally vulnerable applications demonstrates HawkEye’s ability to detect prominent security weaknesses and illustrates how consolidated reporting improves vulnerability prioritization for development teams.

Introduction

The text presents HawkEye, a web-based and automated platform designed to simplify web application vulnerability assessment. The motivation comes from the growing number of cyberattacks against modern web applications, particularly vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), and other OWASP Top Ten threats. Although many security scanners are available, they often operate independently, require command-line expertise, and produce results in different formats, making comprehensive security assessment difficult for small organizations, educational institutions, and non-expert users.

Problem Identified

Existing tools such as Nmap, Nikto, OWASP ZAP, SQLMap, and Wapiti are effective for specific security-testing tasks, but their standalone nature creates several problems:

• Different tools provide results in different formats.
• Findings may be duplicated across multiple scanners.
• Results often lack standardized CWE and CVSS classifications.
• Manual installation and command-line operation are difficult for non-experts.
• Correlating vulnerabilities and prioritizing remediation requires significant technical effort.
• Traditional tools often lack centralized visualization and automated reporting.

Therefore, the study proposes a unified, browser-accessible vulnerability assessment platform that automates scanning, result processing, risk classification, visualization, and reporting.

HawkEye Proposed Solution

HawkEye is developed as a modular web application using:

• Django for the backend.
• SQLite3 for database storage.
• Docker for isolated and secure scanner execution.
• HTML, CSS, and JavaScript for the web interface.
• REST APIs for communication between frontend and backend.
• ReportLab for automated PDF report generation.
• GitHub Actions for CI/CD and automated deployment.

The current implementation primarily integrates OWASP ZAP and Nikto, while its modular architecture allows future integration of SQLMap, Nmap, and Wapiti.

Main Features

HawkEye provides a complete vulnerability-assessment workflow:

1. Target validation – verifies the submitted URL or domain.
2. Automated scanning – executes selected security scanners.
3. Output parsing – extracts vulnerability information from raw scanner results.
4. Result normalization – converts different scanner outputs into a common format.
5. Duplicate removal and correlation – combines overlapping findings.
6. CWE classification – associates vulnerabilities with standardized weakness categories.
7. CVSS scoring – assigns standardized severity levels.
8. Real-time monitoring – allows users to track scan progress through the browser.
9. Automated reporting – produces structured PDF and JSON reports containing vulnerabilities, affected endpoints, severity, and remediation recommendations.

System Architecture

The system uses a layered, microservice-inspired architecture consisting of five major layers:

• Client layer: Web interface for submitting targets and monitoring scans.
• API layer: Django REST Framework for communication and request management.
• Scanning layer: Python-based orchestration of security tools.
• Data layer: SQLite3 database for storing results, logs, and metadata.
• Reporting layer: Generates standardized vulnerability reports.

Docker containers isolate scanning processes, helping prevent scanner operations from interfering with the host system.

Methodology

The platform was developed using an Agile Software Development Life Cycle, with separate development iterations for scanner integration, result processing, reporting, and interface improvements.

The vulnerability-detection pipeline consists of:

Target validation → Scanner execution → Output parsing → Result correlation → Severity classification → Report generation

Security controls include:

• JWT authentication
• Role-based access control
• Input sanitization
• Docker sandboxing
• TLS encryption
• Scheduled scanning

The system was evaluated through unit testing, integration testing, system testing, and user acceptance testing. Tools such as PyTest, Postman, and Selenium were used to assess functionality, reliability, and usability.

Key Contributions

The major contributions of HawkEye are:

1. A unified web-based platform integrating multiple vulnerability scanners.
2. A normalization and correlation system for combining scanner results.
3. Standardized vulnerability classification using CWE and CVSS.
4. A browser-based dashboard with real-time scan tracking and visualization.
5. Automated PDF and JSON security reports.
6. A modular architecture suitable for future security tools and technologies.
7. Improved usability for developers, students, educators, and small organizations.

Results and Conclusion

The study concludes that HawkEye can improve vulnerability assessment by combining multiple scanners, reducing duplicate findings, standardizing severity assessment, and simplifying security reporting. Instead of requiring users to operate several command-line tools independently, HawkEye provides a single browser-based environment for conducting security assessments.

The platform therefore aims to make vulnerability testing more accessible, automated, consistent, and scalable, particularly for organizations that lack specialized penetration-testing expertise.

Future Scope

The proposed future developments include:

• AI-based vulnerability prioritization
• Predictive threat intelligence
• Blockchain-based tamper-resistant audit logs
• Continuous monitoring and deeper DevSecOps integration
• Distributed cloud-based scanning
• Advanced dashboards with heat maps and vulnerability trends
• AI-generated remediation and patch recommendations

Conclusion

The rapid expansion of digital services has heightened the exposure of web applications to security threats, placing increased pressure on developers and organizations to maintain strong security practices. Although numerous tools exist for detecting vulnerabilities, their fragmented nature and reliance on technical expertise often limit effectiveness, especially for small teams and educational environments [4], [5]. HawkEye was developed to address these challenges by providing an integrated, automated, and standardized platform for web vulnerability assessment. HawkEye combines the strengths of widely used open-source scanners—such as OWASP ZAP and Nikto—with a modular architecture that supports future integration of SQLMap, Nmap, and Wapiti. Through its layered design, the platform consolidates key components including scan orches¬tration, output parsing, severity scoring, and PDF/JSON report generation. By unifying these functionalities into a browser-accessible interface, HawkEye improves coverage across mul¬tiple vulnerability types while enabling consistent risk evalu¬ation through CWE and CVSS mappings. This standardized approach ensures that developers, students, and security prac¬titioners can obtain clear, actionable insights without the need for specialized expertise. A central contribution of HawkEye is its normalization and correlation engine, which resolves the limitations of standalone scanners that often produce disjointed outputs. By merging multi-tool findings, removing redundant entries, and assigning uniform severity scores, HawkEye enhances the reliability and clarity of vulnerability reports. This automation not only accelerates the assessment process but also improves remedi¬ation planning by highlighting high-risk issues in a structured format. Usability is another key focus of the platform. HawkEye’s web interface simplifies complex security tasks by enabling users to initiate scans, track scan progress, and download reports directly through a browser. This shift from manual command-line tools to a streamlined dashboard democratizes security testing and encourages broader adoption among insti¬tutions and small organizations that lack advanced penetration-testing resources. From a technical standpoint, HawkEye leverages a Django-based backend, SQLite3 for persistent storage, and Docker for secure and isolated scanner execution. CI/CD integration through GitHub Actions supports automated testing and de¬ployment, ensuring system stability and scalability. Security controls—including authentication, encrypted communication, and sandboxed scanning—further reinforce safe and ethical usage. Experimental validation shows that HawkEye improves detection consistency, reduces duplication of findings, and enhances reporting accuracy compared to using standalone tools independently. Overall, HawkEye demonstrates how automation, modular¬ity, and standardization can significantly improve web vul¬nerability assessment workflows. By simplifying the testing process and providing comprehensive, structured reports, the platform offers a practical and scalable solution suitable for developers, educators, and security teams. Looking ahead, HawkEye lays the groundwork for future innovations aimed at enhancing intelligence, adaptability, and integration within modern cybersecurity infrastructures.

References

[1] B. Mburano and W. Si, “Evaluation of Web Vulnerability Scanners Based on OWASP Benchmark,” in Proc. 26th Int. Conf. Syst. Eng. (ICSEng), 2018, pp. 1–6 [2] S. Alazmi and D. C. De Leon, “A Systematic Literature Review on the Characteristics and Effectiveness of Web Application Vulnerability Scanners,” IEEE Access, vol. 10, pp. 33200–33219, 2022 [3] OWASP Foundation, “OWASP Top Ten,” OWASP Foundation, 2024. [Online]. Available:https://owasp.org/www-project-top-ten/ [Accessed: Aug. 8, 2024]. [4] A. I. Mohaidat and A. Al-Helali, “Web Vulnerability Scanning Tools: A Comprehensive Overview, Selection Guidance, and Cyber Security Recommendations,” Int. J. Res., vol. 10, no. 1, pp. 8–15, 2024. [5] M. A. Yalc¸inkaya and E. U. Ku¨c¸u¨ksille, “Artificial Intelligence and Dynamic Analysis-Based Web Application Vulnerability Scanner,” ISe-Cure, vol. 16, no. 1, 2024. [6] D. Desai, H. Baria, A. Chauhan, G. Yadav, M. Patidar, and M. Mahale, “Website Vulnerability Scanning Extension,” IEEE Conf. Publ., 2024. [Online]. Available: https://ieeexplore.ieee.org/document/11074512/. [7] D. Dumaniya, Y. N. Makawana, and N. D. Bhagchandani, “An Automated Web Vulnerability Scanner for Detecting Common Se¬curity Risks,” Int. J. Comput. Techniques, vol. 12, no. 5, pp. 1–8, Sep.–Oct. 2025. [Online]. Available: https://ijctjournal.org/web-vulnerability-scanner-automation/. [Accessed: Oct. 13, 2025]. [8] “Top Vulnerability Scanning Tools 2025,” EscapeTech Blog, Aug. 2025. [Online]. Available: https://escape.tech/blog/top-vulnerability-scanning-tools-2025/. [Accessed: Oct. 13, 2025].

Copyright

Copyright © 2026 Dipak Patil, Varad Salgare, Devaj Arya, Prof. Suvarna Satkar. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.