The desk
Checks websites and repos
Runs every check, from this site, from X and for the ratings board: HTTPS and certificates, security headers, cookies, the software a server gives away (PHP2Shell included), email spoofing protection and third-party scripts; for repos, vulnerable packages, committed secrets and risky code. Passive only.