The public site does not launch scans or promise automated reports. Use this checklist to prepare an authorized review before any technical activity begins.
01Written confirmation that the requester owns or is authorized to test each target
02Exact domains, IP ranges, exclusions, maintenance windows, and points of contact
03Approved techniques, rate limits, data-handling rules, and stop conditions
04A reporting path that separates observations, evidence, risk, and remediation