20 passive, legal checks that watch your domains for what attackers actually look for first: named CVEs with a public-exploit flag, exposed files/buckets, forgotten subdomains, weak SSL, and more. Only new exposures are reported after the baseline check.
Domains you own or are authorized to audit (no https://, no path). Checked over HTTPS. Run on a schedule - only exposures new since the last check are reported.
Type:array
Checks to run
checks
Optional
headers = missing security headers. tls = SSL/TLS cert & protocol issues. exposed_files = leaked config/backup files. cms = CMS/software version disclosure, cross-checked against real named CVEs (with public-exploit flag). dns_spoofing = missing SPF/DMARC (email spoofing protection). subdomains = forgotten subdomains found via public certificate records. exposed_buckets = publicly-listable cloud storage buckets. exposed_ports = open ports/known vulns via Shodan's public database. breach_history = confirmed past ransomware attack on this domain. cookies = missing Secure/HttpOnly/SameSite flags. cors = overly permissive cross-origin config. http_downgrade = plain HTTP not redirected to HTTPS. robots_disclosure = robots.txt tipping off sensitive paths. js_libraries = outdated JS libraries cross-checked against real CVEs. subdomain_takeover = dangling subdomain pointing at an unclaimed cloud service. dns_hygiene = missing DNSSEC/CAA. server_software = web server version cross-checked against real CVEs. source_maps = publicly exposed .map files leaking source code. wp_plugins = outdated WordPress plugins cross-checked against real CVEs. db_admin_panels = exposed phpMyAdmin/Adminer database admin tools.
