Reconnaissance
Inspect bounded HTTP headers and public HTML signals on an authorized saved target.
Reconnaissance is restricted to saved targets that are active and authorization-confirmed. The backend independently verifies ownership and authorization.