The "/secaudit0" page:

Run a security audit of the current Fossil setup.
This page requires administrator access