It does not by itself establish a vulnerability, ownership, or remediation.
An authorized wildcard scope starts a connected collection: public hostname discovery, DNS resolution, supported web services, URLs, JavaScript analysis and bounded exposure profiles. Each stage records its own result and coverage. Supported individual tools can start from an exact hostname without a prior wildcard scan; descendants are excluded. Tools that discover or compare multiple hosts require wildcard scope. Each tool keeps a separate run and result.
Misconfig.ai records observed public-source data and the time it was collected. Records are grouped by target and category so they can be compared without mixing unrelated signals.
New, changed, and absent observations remain distinct. An absent observation is not proof that a system was removed, and a changed observation needs context before it becomes a finding.
A finding represents work that needs review. The target owner decides whether to make a change, and verification must be recorded separately from a proposed action.
Current coverage is limited to the data and review flows shown in the member workspace. A stage that stopped short says so rather than reporting a number it cannot support: a limit we set, part of our collection not completing, or a source that did not answer.
Coverage and the roadmap distinguish what exists from what is planned.
Misconfig.ai - GK Data LLC, Minnesota, United States. Effective 26 September 2026. @misconfig_ai on X
