Config Analyzer

GetPageSpeed Amplify includes a powerful static configuration analyzer that helps identify security issues and misconfigurations.

How It Works

The analyzer examines your NGINX configuration files and checks for common security vulnerabilities and misconfigurations using the Gixy tool.

What It Checks

• Server-Side Request Forgery (SSRF) — Unsafe proxy configurations
• HTTP Response Splitting — Dangerous header injections
• Path Traversal — Directory escape vulnerabilities
• Missing Security Headers — Recommended headers not set
• Alias Path Traversal — Misconfigured alias directives

Viewing Results

Analysis results are available on each server's detail page under the "Security" tab. Issues are categorized by severity:

• High — Critical security issues requiring immediate attention
• Medium — Important issues that should be addressed
• Low — Minor recommendations for best practices