Cyber Security

Full defensive configuration scan: TLS, headers, cookies, DNS and email auth.

Detect WordPress and review public exposure/config signals without fake CVEs.

Passive API configuration audit — HTTPS, headers, CORS signals (no exploitation).

Analyze CSP, HSTS and related HTTP security headers with remediation snippets.

Inspect Secure, HttpOnly and SameSite flags on public Set-Cookie headers.

Certificate health and TLS posture using the shared SSL engine.

Deep Content-Security-Policy review with remediation guidance.

Passive CORS header review — wildcard origins are contextual.

DNSSEC signals, CAA, and NS/SOA delegation health.

SPF, DKIM, DMARC policy strength — not a deliverability guarantee.

Validate /.well-known/security.txt presence and fields.

Find http:// assets on HTTPS pages (static HTML only).