Web Recon Scanner

Passive checks only — security headers, TLS posture, exposed files. No exploitation.