Description
- External attack-surface inventory (domains, subdomains, open ports, cloud storage, SaaS, stale DNS)
- Data exposure checklist (public buckets, exposed databases, credential leaks, indexed documents)
- Prioritisation guidance for what to fix first
- Re-usable template for recurring reviews
