Design and Implementation of securAX: An AI-based Platform for Web Application Security and Server Configuration Assessment securAX

Abstract

This work addresses the structural fragmentation of cybersecurity analysis tools by designing and implementing a unified open-source platform , that consolidates six analytical dimen sions into a single interface: Dynamic Application Security Testing (DAST), Static Appli cation Security Testing (SAST), web server configuration auditing, TLS/SSL protocol as sessment, HTTP security headers inspection, and Software Composition Analysis (SCA). The platform operates entirely on-premises with no external cloud dependency, ensuring full data sovereignty over analyzed assets. Its design is grounded in internationally recognized standards: OWASP Top 10, CVSS v3.1, MITRE ATT&CK, and the CISA KEV catalog.