Transparent method, explicit limits.

The initial catalog covers 11 observable criteria across transport, headers, cookies, mixed content, components and error exposure. OWASP Top 10:2025 organizes findings; it does not certify the domain.