SecureScan Pro: A Hybrid Web Vulnerability Detection Platform Using OWASP-Based Analysis and Machine Learning

SecureScan Pro is a portable hybrid web vulnerability assessment platform that performs fully passive OWASP Top 10 (2021) scanning, machine learning-based risk classification, and real-time threat intelligence enrichment. The system evaluates all ten OWASP vulnerability categories (A01–A10), inspects seven critical HTTP security headers, TLS/SSL configuration, and exposed endpoints, while enriching findings via VirusTotal, Shodan, and AbuseIPDB. Scan signals are mapped to an eight-dimensional feature vector and classified by a trained Random Forest ensemble (200 trees) into four severity levels: Low, Medium, High, and Critical. A CVSS-inspired composite risk score normalised to 0–10 provides a consolidated exposure metric. A pre-deployment user needs survey (n = 53) confirmed the three dominant barriers to existing tool adoption: overly technical reports (56.6%), high cost (43.4%), and setup complexity (41.5%). SecureScan Pro addresses all three: it deploys locally on Windows/Linux via a single automated script or via Render cloud with no infrastructure expertise required, outputs human-readable severity-rated reports, and is fully open-source and free. Evaluation demonstrated a weighted F1-score of 0.89 with Critical class F1 = 0.94. The source code is available at https://github.com/Sahiljain6/securescan_pro.