Block a user
HTTP header fetcher + security header grader
Project scaffold + shared internal packages (reuse arcline-check logic)
Common ports: 80, 443, 22, 3306, 5432 (report open/closed, don't scan)
CDN detection (reuse arcline-check logic)
IP → ASN / org (via arcline-check internals)
Security headers: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy
Redirect chain (301/302 hops, detect loops)
TLS version (flag TLS 1.0/1.1 as insecure)
Certificate chain completeness