How the review works
Each request begins in passive_public. Verification protects private access, the verified-running state keeps the journey clear while processing continues und the results-ready email is sent only after both verification and completion. authorized_deep, read-only connector evidence und trusted export intelligence apply only when ownership, engagement und approvals are in place.
Three-lane model
The public review lane is passive-first and non-intrusive by design.
KMayer Exposure Lens AI reviews public DNS, mail authentication, HTTPS, TLS, headers, trust files, indexing signals, same-host public evidence, vendor ecosystem indicators und passive asset inventory clues. It does not perform exploit attempts, brute force, credential attacks, or intrusive testing in the public lane.
Prüfung lane
Public, non-intrusive review of external domain and trust signals.
Excludes: login attempts, brute force, exploit attempts, intrusive scanning, credential attacks, bypass attempts, private data access.
Prüfung lane
Protected results after business email verification.
Prüfung lane
Gesteuerte tiefere Prüfung available only under verified ownership, active engagement, approved scope und explicit consent.
Executive journey view
The review starts from a bounded passive request and business context, not an unrestricted scan brief.
Die erste kundenbezogene E-Mail schützt die private Route, bevor ein fertiges Ergebnis bereitgestellt wird.
Öffentliche Nachweise is collected first so the opening lane stays safe, non-invasive und explainable.
The verified recipient sees either the verified-running state or the completed private results page.
If ownership and engagement qualify, authorized_deep can unlock a more decision-ready evidence set.
Read-only-Connector-Nachweise and approved trusted exports can deepen confidence only when explicitly eligible.
The output moves into validation, prioritization und deeper remediation planning rather than stopping at findings.
Prüfung journey
Every request starts with domain validation, normalization und guarded input handling before any public fetch begins. Invalid, private-address, localhost und suspicious targets are rejected up front.
Bounded request capture before any review starts.
The default entry lane reviews public DNS, mail-trust posture, HTTPS reachability, TLS basics, visible headers, trust files, indexing signals und a tightly capped set of same-host public pages.
Zuerst öffentliche Nachweise, keine intrusive Ausweitung.
The first customer-facing message is the verification email. It protects the private results route before any completed-results delivery is allowed.
Verification comes before private delivery.
The one-time verification link confirms that the intended recipient is the person unlocking the private route, even if the opaque URL is forwarded or discovered out of context.
Privater Zugriff bleibt an den vorgesehenen Empfänger gebunden.
After verification, the private route can show a verified-running state instead of exposing incomplete results. This makes it clear that access is valid while preparation is still underway.
No partial result exposure while the review is still being prepared.
When the passive review has finished, the private page opens the completed results immediately for the verified recipient.
Completed results appear only on the verified route.
If the scan finishes before verification, the ready state is preserved but the results-ready email waits until verification occurs. No verified click means no results-ready email to that recipient.
Die Results-Ready-Zustellung bleibt hinter Verifizierung und Abschluss gesperrt.
The unlocked page explains the executive summary, technical highlights, risk themes, evidence-source context, priorities, business or trust cues und practical next-step leitlinien.
Business framing and technical context stay together.
The deeper lane is governed. It applies only when verified ownership, active engagement und the right approvals exist for the reviewed domain or account.
authorized_deep is explicit, not anonymous or automatic.
read-only connector evidence, trusted export intelligence, monitoring, history und deeper explainability can extend the review only inside that governed lane and only when the workflow allows them.
Connector and export context deepen the result only when the engagement qualifies.
Decision matrix
Private results are intended for the verified recipient. Verification closes the trust gap between the public submission flow and the non-indexed private results route und it keeps completed-results email delivery aligned to the right recipient.
Der öffentliche Modus bleibt ausschließlich passiv. Er führt keine Login-Versuche, Brute Force, Credential Spraying, Exploit-Verhalten, intrusive Tests, Hidden-Path-Probing oder aktive internetweite Scans aus.
KMayer can validate the findings, prioritize the highest-impact fixes, determine whether authorized deeper review is justified, interpret connector-backed or trusted-export evidence und move the work into assisted remediation planning.
KMayer provides KMayer Exposure Lens AI. KMayer is the company and provider, while KMayer Exposure Lens AI is the tool and service family used for this review workflow.
Where deeper evidence comes from
The first review stays passive. When ownership and engagement are verified, KMayer can extend the review with approved read-only connector context, trusted export intelligence, monitoring, history und remediation sequencing.
Passive evidence first
The first review is passive and bounded: DNS, mail posture, HTTPS, TLS, trust files, indexing signals und capped same-host public evidence are evaluated before any deeper lane is considered.
Gesteuerte deeper context
The deeper lane is not anonymous. It requires verified ownership, active engagement, approved scope und explicit approval for read-only connector evidence or trusted export intelligence.
Decision-ready follow-through
When eligible, connector and trusted-export context can strengthen provenance, vendor ecosystem interpretation, passive asset inventory, monitoring, history und the sequence of practical remediation work.
Nachweise reading lane
Use these guides to understand the boundary between safe public evidence, gesteuerte vertiefende Prüfung und practical next steps.
Haben Sie Fragen oder benötigen Sie fachkundige IT-Unterstützung? Wir helfen gerne. Ob Managed Dienste, Cybersecurity-Lösungen oder Cloud-Infrastruktur: Unser professionelles Team ist bereit. Lassen Sie uns Ihr Unternehmen mit maßgeschneiderten IT-Lösungen stärken.
KMayer Ltd | European Trade Centre, 7th Kilometer Business District, 1784 Sofia, Bulgaria | +31 10 8998556
© 2026 KMayer Technology Solution. Alle Rechte vorbehalten.
