| Validação de domínio/URL | ✓ | ✓ | ✓ |
| DNS público | ✓ | ✓ | ✓ |
| API Exposure | ✓ | ✓ | ✓ |
| Public File Exposure | ✓ | ✓ | ✓ |
| Headers de segurança | ✓ | ✓ | ✓ |
| HTTP/HTTPS reachability | ✓ | ✓ | ✓ |
| TLS resumido | ✓ | ✓ | ✓ |
| HTTP security headers | ✓ | ✓ | ✓ |
| Certificate Transparency Discovery | — | ✓ | ✓ |
| Passive DNS / Historical DNS | — | ✓ | ✓ |
| Subdomain Takeover Detection | — | ✓ | ✓ |
| Origin IP Exposure | — | ✓ | ✓ |
| CDN/WAF Detection | — | ✓ | ✓ |
| DNS Security Review | — | ✓ | ✓ |
| SaaS/Cloud App Exposure | — | ✓ | ✓ |
| Public Repository / Secret Exposure | — | ✓ | ✓ |
| Third-party Script / CSP / SRI Review | — | ✓ | ✓ |
| Evidence Confidence Score | — | ✓ | ✓ |
| API Exposure Engine | — | ✓ | ✓ |
| JavaScript & Frontend Intelligence | — | ✓ | ✓ |
| OWASP Top 10 Application Checks | — | ✓ | ✓ |
| Workspace, Pentester QA, VKB e Report PDF | — | ✓ | ✓ |
| Pentest Humanizado gray/black box | — | — | ✓ |
| Revisão especialista de falsos positivos | — | — | ✓ |
| Confirmação de impacto em fluxos sensíveis | — | — | ✓ |
| Validação de lógica de negócio | — | — | ✓ |
| Apoio de remediação | — | — | ✓ |
| Revalidação assistida | — | — | ✓ |
| Pentester QA com análise humana | — | — | ✓ |