HawkEye: Web Vulnerability Analysis and Security Audit Tool
TL;DR
HawkEye is introduced, a modular, web-based vulnerability auditing platform designed to streamline security analysis by integrating multiple scanning tools within a unified dashboard and illustrates how consolidated reporting improves vulnerability prioritization for development teams.
Abstract
The widespread adoption of web applications has significantly increased exposure to security risks, making automated vulnerability assessment an essential component of modern software development. Although several open-source scanners provide strong detection capabilities, they typically operate independently, require technical expertise, and produce unstructured reports, limiting their accessibility and effectiveness. This paper introduces HawkEye, a modular, web-based vulnerability auditing platform designed to streamline security analysis by integrating multiple scanning tools within a unified dashboard. HawkEye uses Docker-isolated environments to orchestrate scanners and employs a Django–SQLite3 backend to manage scan workflows and result storage. The current implementation provides full integration for OWASP ZAP and Nikto, while modular support is included for incorporating Nmap, SQLMap, and Wapiti. The platform consolidates heterogeneous outputs into a standardized schema, applies CVSS-based severity classification, and generates exportable PDF/JSON reports with remediation guidance. Experimental testing on intentionally vulnerable applications demonstrates HawkEye’s ability to detect prominent security weaknesses and illustrates how consolidated reporting improves vulnerability prioritization for development teams
