Kashef
On mobile
What is Kashef?
Kashef is an Arabic-first platform from ScoutHub Lab for auditing website security and readiness, made for website owners. It scans a site from the outside, the way a browser or an attacker sees it, and gives an A+ to F grade with evidence and a prioritized fix list. AI explains the results in Arabic but never computes the score.
Key features
- Free quick scan in under 10 seconds
- 45 technical checks in one report
- Fixed-rule security score you can reproduce
- 259 finding types with plain-language fixes
- Shareable report by link or PDF, with your own branding
- Scheduled monitoring with email, Slack and webhook alerts
- Scan comparison to see what improved or got worse
- Regional compliance indicator packs
- WHOIS lookup across 16+ countries
- API, command-line tool and GitHub Action
- AI assistant integration through MCP
- Team dashboard with roles, permissions and two-step sign-in
- Fully Arabic, right-to-left interface, with English
Tech stack
- Astro
- React
- TypeScript
- Tailwind CSS
- Node.js
- Express
- PostgreSQL
- Drizzle ORM
- Redis
- BullMQ
- Better Auth
- Puppeteer
- Chromium
- Lighthouse
- axe-core
- Wappalyzer
- Google Gemini API
- Model Context Protocol (MCP)
- OpenAPI / Swagger
- PageSpeed Insights API
- Chrome UX Report (CrUX)
- RDAP / WHOIS
- Resend
- Cloudflare Turnstile
- Sentry
- Docker
- GitHub Actions
- GitHub App
- Vitest
- Render
- Oracle Cloud
Frequently asked questions
What is Kashef website security scanner?
Kashef is an Arabic-first platform from ScoutHub Lab for auditing website security and readiness. It scans a site from the outside, the way a browser or an attacker sees it, and gives it a clear A+ to F grade. The grade comes with evidence, a fix list ordered by priority, and an Arabic explanation that helps the site owner see what to fix first.
What does Kashef check on a website?
A full Kashef report runs 45 technical checks. They include TLS, HSTS, CSP and security headers; DNS, DNSSEC and exposed ports; and email spoofing protection through SPF, DKIM and DMARC. Kashef supports Arabic domain names, detects lookalike phishing domains, and also checks performance, accessibility and SEO readiness.
How does Kashef calculate a website's security grade?
In Kashef, AI does not compute the grade. The grade comes from fixed rules that can be reviewed and repeated, so the same site gets the same result every time. The AI's job is to explain: it turns the technical result into language the site owner understands. Kashef explains 259 result types in Arabic.
Does Kashef have a free scan?
Yes. Kashef offers a free quick scan that takes less than 10 seconds. The full report covers 45 technical checks, an A+ to F grade, a fix list ordered by priority, and an AI-written executive summary in Arabic.
What is in a Kashef report?
A Kashef report gives an A+ to F grade with evidence for each finding, a fix list ordered by priority, and an executive summary in Arabic. Reports can be downloaded as PDF files with a verification stamp and a QR code. Kashef also includes 11 regional compliance indicator packs.
Can Kashef connect to other tools?
Yes. Kashef offers API and MCP access, so its checks can be used from other systems and tools, not only from the website. The same rule applies everywhere: the grade is computed with fixed rules, and AI explains the result without judging it.
