A multi-stage network security scanner that discovers open ports, grabs service banners, maps detected versions against known CVEs, and flags exposed services that should never be internet-facing — ...