Scan a domain's public attack surface

Passive only. The same lookups a browser or mail server makes — no intrusive scanning. You get a grade, prioritised findings, and a copy-paste fix for each.