The invention discloses a website security detection method and device. The method comprises obtaining website target bug information; determining target bug recognition characteristics and target bug detection rules according to the target bug information; generating target bug recognition rules according to the target bug recognition characteristics; obtaining websites related to the target bugs from a website information base according to the target bug recognition rules to generate a to-be-detected website set; performing security detection on the websites in the to-be-detected website set by using the target bug detection rules. By the aid of the method and the device, the problem that one type of websites cannot be detected in the prior art is solved, the problems of low security detection efficiency and high costs in the prior art are solved, the bug detection quality is guaranteed, bugs can be found as early as possible, and the website information security is maintained.