SENTINEL
What the internet can already see of yours.
Point this at a host you control and it reports the open services, known CVEs, certificate history and registry records that are already public — scored, explained, and with a fix for each finding. The useful inverse of hunting for other people's exposed cameras: finding yours before someone else does.
Entirely passive. Every source is data someone else already published: Shodan's scan index, certificate transparency logs, public DNS, RDAP. Nothing here connects to the target, and devices known to ship with default credentials are flagged as such — never tested. Fingerprinting a device is observation; authenticating to it is intrusion.