◈Passive DNS recon
Map subdomains, MX records, and nameserver history without touching the target.
◇TLS & certificate intel
Surface expired certs, weak cipher suites, and certificate transparency leaks.
⬡Exposure scoring
Aggregate findings into a ranked risk score — prioritise what actually matters.