Passive public-surface check: TLS, DNS authentication, security headers, privacy page. No credentials required. No private systems touched.
Findings are sealed to the Strikaris Chain at time of scan -- timestamped and independently verifiable.
what the scan covers
regulatory exposure mapped
Each finding in the Surface Card is mapped to the applicable framework so you know exactly what's at risk.
Public surface only. No credentials, no internal systems, no private APIs accessed.