✓DNS & subdomain enumeration
✓Port scan — 18 high-value ports
✓Security headers analysis
✓SSL/TLS deep analysis
✓Exposed file detection
✓CVE matching via NVD
✓CORS & cookie security
✓Username enumeration testing
✓File upload security
✓Client-side payment data exposure
✓Default credential testing
✓Admin panel discovery
✓HTTP method testing
✓Error disclosure checks
✓Vulnerability Signature Database