Non-intrusive web CVE detection, focused on the PHP ecosystem.
It fingerprints a target and correlates known CVEs. It does not exploit.
Findings are version-correlation leads
from passive fingerprinting, not confirmed or exploited vulnerabilities.
Verify each against the vendor advisory. Private, loopback and
cloud-metadata addresses are blocked by this hosted service.
