Infrastructure security review
Review DNS, TLS, edge configuration, storage, backups and deployment practice for exposure and drift.
What BSA is designed to examine
- DNS records and email anti-spoofing configuration.
- TLS versions, certificates and edge or firewall configuration.
- Storage permissions, public administration endpoints and database exposure.
- Backups: encryption, and whether restoration has been demonstrated.
- CI/CD permissions, secrets handling and separation of production from development.
How results are meant to be reported
- Publicly observable settings can be checked passively, with robots.txt respected.
- Anything that needs credentials or active probing waits for a recorded authorization.
- Backups are reported as restorable only when a restoration was actually demonstrated.
Review of a system is limited to the hosts, accounts and time window that were authorized.
Status
BSA is in development. This site describes what the platform is designed to do. It does not report completed audits, customers, certifications or integrations.