Websites & authorization
Add only websites you own, manage or are explicitly authorized to assess. Assessment scope stays bound to the exact website.
Documentation
Add only websites you own, manage or are explicitly authorized to assess. Assessment scope stays bound to the exact website.
Standard and Deep assessments collect bounded evidence without destructive exploitation, password guessing or denial-of-service behavior.
Confirmed, evidence-backed, review-signal, inconclusive and not-assessed states keep the strength of each conclusion explicit.
Finding detail connects observed evidence to impact, developer action and retest criteria.
A later compatible assessment may show Still Present, Not Observed in Latest Scan, Improved or Inconclusive. A comparison is not authoritative proof of a fix.
Reports preserve assessment type, evidence quality, findings, remediation context and comparison history.