Scan any public website for missing security headers, weak TLS, CSP gaps, cookie flags, CORS misconfiguration, exposed secrets, JavaScript risks, and OWASP Top 10 signals. Deterministic findings with optional AI explanations - never invented vulnerabilities.
