Method

Authorize, measure, record, then a human decides.

Four steps, in this order, with no step skippable. The order is the product: authorization precedes measurement, and measurement precedes any claim.

The four steps

Each step fails closed rather than guessing.

1

Authorize the scope

Register the target and affirm the legal right to inspect it. Authorization is deny-by-default: an unclear scope fails closed rather than scanning anyway.

2

Measure passively

Observe what is already published — headers, TLS, DNS, cookies, CORS, email posture, declared components. No exploitation, no credential guessing, no disruption of the target.

3

Record with provenance

Each result stores source, method, timestamp, severity, confidence, and the coverage gap. Severity and confidence never collapse into one number.

4

A human decides

Remediation is prepared, never applied. Every state-changing action requires an authenticated same-origin request from a person with the role to take it.

Why passive by default

An active probe can disrupt the thing it measures, so it is a separate, explicitly authorized mode rather than the default path.

Passive
Reads what the target already publishes. Default. Non-disruptive.
Active
Off unless separately enabled and authorized for that target.
Never
No exploitation, no credential attacks, no denial of service.
How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.