Passive web security scanner — detects XSS, SQL injection, leaked API keys, missing headers, and 24 more vulnerabilities.