Portable local workspace
Export the stored scan, report details and finding register as JSON. Import the file later in the same or another browser.
Authorised recon and reporting workspace
Recon Desk
Review a public web asset using safe passive and configuration checks. Turn validated observations into structured security findings, then export a client-ready assessment report.
Designed for authorised testingNo port scanning, brute force, credential testing or exploitation. The server blocks private and reserved network targets.
recon-desk / safe-mode
01Resolve public DNS and certificate names
02Review TLS certificate and expiry
03Inspect HTTP security headers and cookies
04Check security.txt, robots.txt and sitemap.xml
05Build, edit and export assessment findings
HTTP status—Primary response
DNS records0Supported records
Certificate names0Public CT entries
Observations0Needs validation
Target and method
DNS records
TLS certificate
HTTP response and headers
Standard files
Certificate-transparency names
Observations to validate
Raw JSON
Assessment boundary
Recon output is evidence for review, not proof of a vulnerability. Confirm the issue, programme scope, duplicate rules and disclosure requirements before submission.