Feature docs · Forms & redirects
Forms are the entry door for customer data; open redirects can ferry users to phishing sites under your domain. Guardbee reports both surfaces in business language.
What is checked?
- CSRF / anti-forgery token signals
- Insecure autocomplete on sensitive fields
- Password fields over HTTP
- Unvalidated redirect / return URL parameters (CWE-601)
Business impact
CSRF can drive account actions as the user. Open redirects legitimize phishing under your domain. Both look like “small tech debt” and create large trust damage.
Run these checks with Guardbee
Add your brand, pick the modules that matter, and get findings in business language. New accounts get 25 credits.
Frequently asked questions
Does it scan every form?
It reviews form signals on discovered pages — not full application depth.
How do you fix open redirects?
Allowlist redirect targets; never write raw user input into Location.
Related to rate limiting?
Rate-limit signals are a separate module that complements abuse/brute-force posture.