Configuration Analyzer

Environment configuration security assessment. Analyzes application settings, server configurations, and security headers against best practices and compliance requirements.

Configs Analyzed

14

Configuration files scanned

Issues Found

11

Misconfigurations detected

Secure %

72%

Configurations passing checks

Critical Issues

3

Require immediate remediation

Filter by Category:

Authentication

Encryption

Headers

CORS

Logging

Secrets

All

File	Category	Setting	Current Value	Recommended	Severity
appsettings.json	Authentication	JWT:ValidateIssuer	false	true	Critical
appsettings.json	Authentication	JWT:TokenLifetime	1440 min	60 min	High
appsettings.json	Authentication	Password:MinLength	8	12	Medium
appsettings.json	Authentication	Lockout:MaxAttempts	10	5	Medium
appsettings.json	Encryption	TLS:MinVersion	1.2	1.2	Critical
appsettings.json	Encryption	DataProtection:Algorithm	AES-256	AES-256	High
web.config	Headers	X-Content-Type-Options	missing	nosniff	High
web.config	Headers	X-Frame-Options	SAMEORIGIN	DENY	Medium
web.config	Headers	Strict-Transport-Security	max-age=31536000	max-age=31536000; includeSubDomains	High
web.config	Headers	Content-Security-Policy	configured	configured	High
appsettings.json	CORS	AllowedOrigins	*	specific domains	Critical
appsettings.json	CORS	AllowCredentials	true	false (with wildcard)	High
appsettings.json	Logging	LogLevel:Default	Information	Warning	Low
appsettings.json	Logging	EnableSensitiveDataLogging	true	false	High
appsettings.json	Logging	RetentionDays	30	90	Medium
.env	Secrets	ConnectionString in plain text	detected	use Key Vault	Critical
appsettings.json	Secrets	API keys in config	none detected	use Key Vault	Critical
Dockerfile	Secrets	Hardcoded credentials	none detected	use build args	Critical
appsettings.json	Encryption	Cookie:SecurePolicy	Always	Always	High
appsettings.json	Authentication	RequireHttpsMetadata	true	true	Critical