Constrain
Accept only a public website hostname on the standard encrypted port.
Low-impact public observation
SITE CHECK / 01
See what a browser can see.
Check one public homepage for browser-facing security signals. FlawAtlas validates and pins the public destination, follows only safe redirects, and never submits a form or attempts an exploit.
- Requests
- Homepage headers only
- Authentication
- Never attempted
- Visibility
- Unlisted by default
METHOD / CURRENT SLICE
Evidence without intrusion.
Pin
Resolve and pin the public network address before every request and redirect.
Observe
Retain only a small allowlist of browser-facing security headers.