Automatically reverse-engineer any website's form flows with AI-powered analysis.
DeepForm is a CLI app that uses Hyperbrowser to automatically reverse-engineer any website's form flows — identifying input fields, validation rules, submission logic, and UI patterns — so developers can understand, replicate, or debug them instantly without inspecting code manually.
- 🔍 Intelligent Form Detection - Automatically discovers all input fields on any webpage
- 🛡️ Security Analysis - AI-powered detection of phishing patterns and suspicious form behaviors
- 🚀 Fast Scanning - Powered by Hyperbrowser's headless browser technology
- 🎯 Developer-Friendly - Clean, actionable insights for form structure analysis
- 🎨 Beautiful CLI - Color-coded output with emoji indicators
- Node.js 16+ installed
- Hyperbrowser API key from hyperbrowser.ai
- OpenAI API key from openai.com
-
Clone or download this project
-
Install dependencies:
npm install
-
Set up environment variables: Create a
.envfile in the project root:HYPERBROWSER_API_KEY=your_hyperbrowser_api_key_here OPENAI_API_KEY=your_openai_api_key_here
- Hyperbrowser API Key: Sign up at hyperbrowser.ai to get your API key
- OpenAI API Key: Get your API key from openai.com
Run DeepForm with:
npx tsx index.tsThen enter any URL when prompted:
🔗 Enter URL to scan: https://example.com
DeepForm will:
- 🕷️ Scrape the webpage using Hyperbrowser
- 🔎 Extract all form input fields
- 🧠 Analyze the form structure with AI
- 📋 Provide security insights and recommendations
🔗 Enter URL to scan: https://login.example.com
⚙️ Scraping with Hyperbrowser...
✅ Found 3 inputs:
1. <input type="text" name="username" placeholder="Username">...
2. <input type="password" name="password" placeholder="Password">...
3. <input type="hidden" name="csrf_token" value="abc123">...
🧠 Analyzing form structure with OpenAI...
📋 Security Analysis:
This appears to be a standard login form with proper security measures:
- Username and password fields are correctly configured
- CSRF token present for protection against cross-site attacks
- No suspicious hidden fields or unusual patterns detected
- Standard field naming conventions used
- Web Scraping: Uses Hyperbrowser's powerful browser automation to access any website
- Form Extraction: Intelligently parses HTML to find all input elements
- AI Analysis: Leverages OpenAI's GPT models to analyze form patterns and identify potential security issues
- Actionable Insights: Provides clear, developer-friendly analysis of form structure and security
- All web scraping is done through Hyperbrowser's secure infrastructure
- No sensitive data is stored locally
- API keys are kept in environment variables
- Form analysis helps identify potential security vulnerabilities
- Security Auditing: Identify phishing attempts and suspicious form patterns
- Competitive Analysis: Understand how other websites structure their forms
- Development Research: Learn form best practices from successful sites
- QA Testing: Verify form implementations across different websites
- Accessibility Review: Analyze form field labeling and structure
- Node.js 16 or higher
- Valid Hyperbrowser API key
- Valid OpenAI API key
- Internet connection for API calls
- TypeScript - Type-safe development
- Hyperbrowser SDK - Web scraping and browser automation
- OpenAI GPT-4 - AI-powered form analysis
- Chalk - Beautiful terminal colors
- Dotenv - Environment variable management
"Cannot find module" errors: Run npm install to install dependencies
API key errors: Make sure your .env file is in the project root with valid API keys
Scraping fails: Some websites may block automated access - try different URLs
No forms found: The website might use dynamic forms loaded with JavaScript
Ready to analyze forms like never before? Get started at hyperbrowser.ai 🚀