Your files stay on your device

Security audit report builder

Turn an audit JSON export into a masked, self-contained HTML report that prints to PDF, with Markdown and JSON exports alongside.

Paste the audit JSON, then press Build the report.

What this builder does, and what it does not
It reads one version 1 audit JSON export and writes a masked report you can hand to someone else: a self-contained HTML document that prints to PDF from your browser's print dialog, plus Markdown and JSON for other systems. Checks that did not run are listed as gaps by name, never counted as passes, and the scope section states what an external configuration audit cannot see: authentication, authorization, and business logic. Masking is a pattern pass, not a secret scanner; it rewrites the shapes it knows, and with masking off the report says exactly which categories carry raw values. Dates come from the export itself and the score is whatever the audit stated, nothing invented.OptionsBuild the report

More regex & cron tools

- JSON validator (/json/validator)
- JSON formatter (/json/formatter)
- JWT decoder (/web/jwt)
All regex & cron tools (/dev)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/dev/website-security-audit-report-builder
Markdown version: https://nutter.tools/dev/website-security-audit-report-builder.md
Plain-text version: https://nutter.tools/dev/website-security-audit-report-builder.txt
Agent index: https://nutter.tools/llms.txt