Disclosure

About this scanner

TRACE performs a passive outside-in assessment of a public digital surface. It is not an authenticated review and it is not a legal determination.

TRACE-Surface-Scan/1.0 (+https://traceos.7unit.tech/scanner)

What this scanner does

• Performs a passive outside-in assessment of a public digital surface.
• Uses HTTP GET and HEAD against the submitted public hostname.
• Performs DNS lookups for publicly resolvable names.
• Inspects the TLS handshake presented on 443.
• Parses HTML of public responses for headers, cookie names without values, and third-party hosts.
• Scores from persisted checks and versioned rules. Null scores stay null.

What this scanner never does

• Does not perform port scanning.
• Does not attempt credentials or authenticated access.
• Does not submit forms.
• Does not fuzz, brute-force, or exploit.
• Does not make legal claims about the scanned organisation.

Request pacing

At most 20 HTTP requests per scan, 2 concurrent, and 1 request per second. Subdomain HEAD uses a fixed list. Common privacy paths are requested only as public URLs.

Contact

Questions, opt-out, and security or abuse reports: hello@7unit.tech.

To request an opt-out, write to hello@7unit.tech with the hostname. You can also request an Engineering Audit from a completed Surface report.

How TRACE handles personal data you send

Personal data you send to TRACE is described on a separate notice. How TRACE handles personal data you send