Category: Analytics

Security Posture Scan

Non-intrusive security assessment of an AUTHORIZED target: security headers (CSP strength, HSTS, clickjacking protection, referrer/permissions policy), cookie flags on session-shaped cookies, HTTPS enforcement, permissive CORS, information disclosure (version banners, stack traces) and a fixed four-entry check for well-known exposed files. Refuses anything outside an active scope; no fuzzing, brute force, payloads or exploitation