This is a passive posture check of what your site openly serves — not a penetration test. Scan sites you own or have permission to test.