Web Iron Shield Documentation
Welcome to the complete documentation for Web Iron Shield - the professional website security scanner. This guide covers everything from installation to advanced features.
Installation
Web Iron Shield is a standalone Windows application requiring no installation process.
System Requirements
- Operating System: Windows 10 or Windows 11 (64-bit)
- Memory: 4 GB RAM minimum, 8 GB recommended
- Storage: 100 MB free disk space
- Network: Active internet connection required
- Display: 1280x720 resolution or higher
Download & Run
- Download the latest version from the download page
- Save the executable file to your preferred location
- Double-click to run - no installation wizard needed
Quick Start Guide
Get your first security scan running in under 60 seconds:
- Launch Application: Double-click WebIronShield.exe
- Enter Target URL: Type your website address (e.g., https://example.com)
- Configure Options: Adjust scan depth and page limits if needed
- Start Scan: Click the "Start Scan" button
- Monitor Results: Watch vulnerabilities appear in real-time
- Export Report: Save findings as HTML or JSON (Pro feature)
Supported URL formats:
✓ https://example.com
✓ https://www.example.com
✓ https://example.com/application
✓ http://localhost:8080
✗ example.com (missing https://)
✗ ftp://example.com (unsupported protocol)
License Activation
After purchasing the Pro version, you'll receive a license key via email within minutes.
Activation Steps
- Open Web Iron Shield
- Navigate to License → Activate License in the menu
- Enter your license key exactly as received
- Click the "Activate" button
- Restart the application to unlock all Pro features
Vulnerability Scanning
Web Iron Shield detects over 100 types of security vulnerabilities across multiple categories.
Detected Vulnerability Types
| Category | Vulnerabilities | Version |
|---|---|---|
| SQL Injection | Error-based, blind, time-based SQLi | FREE |
| Cross-Site Scripting | Reflected, stored, DOM-based XSS | FREE |
| CSRF | Cross-Site Request Forgery | PRO |
| SSRF | Server-Side Request Forgery | PRO |
| XXE | XML External Entity Injection | PRO |
| Path Traversal | Directory traversal, LFI, RFI | PRO |
| NoSQL Injection | MongoDB, CouchDB injection | PRO |
| Security Headers | Missing CSP, HSTS, X-Frame-Options | FREE |
| Information Disclosure | Server version, stack traces, errors | FREE |
| Authentication | Weak passwords, session issues | PRO |
Inspection Tools
The Pro version includes 15+ professional inspection tools for comprehensive security analysis.
| Tool | Description |
|---|---|
| 🌐 Header Analyzer | Analyze HTTP response headers and security configurations |
| 🔐 SSL/TLS Checker | Verify certificate validity, expiration, and cipher strength |
| 🔎 DNS Lookup | Query all DNS record types and discover subdomains |
| 📡 Port Scanner | Scan for open ports with service detection |
| 🔬 Technology Detector | Identify CMS, frameworks, libraries, and server software |
| 📄 Robots.txt Checker | Analyze robots.txt for sensitive path disclosure |
| 🗺️ Sitemap Analyzer | Parse sitemap.xml and analyze URL structure |
| ℹ️ Website Info | Comprehensive site information gathering |
| 🧪 Payload Generator | Generate test payloads for manual security testing |
| 📊 Statistics | View scan analytics, trends, and historical data |
Reports & Export
Generate professional security reports for clients, stakeholders, and compliance documentation.
Available Export Formats
- HTML Report: Beautiful, printable report with executive summary, detailed findings, and remediation recommendations
- JSON Export: Machine-readable format for integration with other tools and systems
- CSV Export: Spreadsheet-compatible format for scan history analysis
Scan History
Pro version maintains a complete history of all scans, allowing you to track security improvements over time.
History Features
- View all past scans with full results
- Search and filter by URL, date, or severity
- Compare scans to track remediation progress
- Export history to CSV for external analysis
- Statistics dashboard with vulnerability trends
Free vs Pro Comparison
| Feature | Free Version | Pro Version |
|---|---|---|
| Security Scans | 3 scans total | Unlimited |
| Vulnerability Checks | 20+ basic checks | 100+ comprehensive checks |
| SQL Injection Detection | ✅ Yes | ✅ Advanced |
| XSS Detection | ✅ Yes | ✅ Advanced |
| CSRF, SSRF, XXE | ❌ No | ✅ Yes |
| Scan History | ❌ No | ✅ Full history |
| Export Reports | ❌ No | ✅ HTML, JSON, CSV |
| Inspection Tools | ❌ No | ✅ 15+ tools |
| Auto Updates | Manual only | ✅ Automatic |
| Support | Community | Priority email |
| Price | $0 | $49.99 one-time |
Upgrading to Pro
- Visit the pricing page
- Click "Buy Pro" to purchase via PayPal
- Receive your license key via email (instant delivery)
- Activate in the application under License → Activate
Frequently Asked Questions
Is this a subscription?
No! Web Iron Shield Pro is a one-time purchase with lifetime updates included. No recurring fees ever.
Can I use it commercially?
Yes, you can use Web Iron Shield for commercial security testing and client work.
Is scanning websites legal?
Only scan websites you own or have explicit written permission to test. Unauthorized scanning is illegal in most jurisdictions.
Can I transfer my license?
Licenses are bound to hardware. Contact support at taqijoburg@gmail.com for license transfers to new computers.
What about refunds?
We offer a 30-day money-back guarantee. See our refund policy for details.
Contact & Support
🌐 Website: webironshield.com
Pro users receive priority support with 24-48 hour response time guaranteed.