~/home / website-dna
🧬 n8n · live
The DNA of your website.
Every homepage loads genes from elsewhere: scripts from a CDN, fonts from Google, videos, trackers. Enter a domain and an n8n workflow sequences it: which building blocks come from whom, which libraries run in which version and whether they carry known vulnerabilities (CVE). The result is a double helix and a genome report that is genuinely useful for privacy and security.
The homepage did not answer, so the genome is almost empty.
◈ The geneticist's diagnosis
Three therapies
Libraries and known vulnerabilities
No library with a recognisable version found. Bundled or renamed files do not reveal their version.
Third parties: who is listening on page load
No resources from foreign hosts: the homepage loads only its own code.
Every foreign host receives the visitor's IP address on page load. Under the GDPR that needs a legal basis, often consent.
Cookies
Only cookies the server sends with the homepage. Cookies that JavaScript sets later in the browser (e.g. analytics) are not included.
Protection: headers and TLS
Technology with version
All base pairs
All resources ()
Recently sequenced
Samples of other visitors. Tap one to open its helix.
How it works
- WebhookYour click starts an n8n workflow on my server, with the domain attached.
- Take a sampleA small PHP script loads the homepage and at most five JavaScript files of the same host (max 300 KB each) to read their version banner. Foreign resources are never downloaded, only read as addresses in the HTML. Every address must be public.
- Sequence the genomeA Code node finds every script, stylesheet, font, iframe and image, files the host as own or foreign and recognises services (CDN, analytics, fonts, video, chat) and libraries with version.
- Two labs in parallelOSV.dev checks the libraries (npm) for known vulnerabilities while the checkpoint measures security headers and TLS.
- MergeA Merge node waits for both labs and joins the findings; they become the base pairs of the helix.
- AI geneticistgpt-oss-120b at IONOS in Germany writes the diagnosis and three therapies from the measured values only. If the AI does not answer, a template steps in.
- IngestThe result lands on the server as JSON, and this page draws the helix and the report from it.
Privacy: only publicly reachable things are checked (homepage, own JavaScript files, headers, TLS). The domain and the result are stored so the link works, plus a salted hash of your IP address or a random token in your browser, so you can delete the sample later. Cookie values are never read, only names and flags. More in the privacy policy
A short pause between two samples and a limit per hour keep the lab from overheating. Note: the report is a snapshot of the homepage, not a full audit.