Technical terms, in plain words.

It acts as the guide that takes your domain to the right services.

We review it to find misconfigured routes or routes pointing to unexpected places.

CT records web certificates in public logs. Their names can reveal historical subdomains.

We consult those logs as a public signal; an old name does not prove that a system is still active.

An MX DNS record directs a domain's incoming email to its mail servers.

We check it to identify the public mail route and unexpected configuration.

They encrypt the connection between the browser and your site.

We check that they remain valid, match the domain, and are renewed on time.

These are instructions the server sends to the browser with each page.

Some instructions help reduce risks when displaying content.

HTTP transfers data between the browser and a site; HTTPS adds encryption through TLS.

We check whether HTTP redirects to HTTPS and whether the secure connection works correctly.

These are addresses such as app.yourcompany.com that can point to different services.

They help us detect public services that may be missing from the team's inventory.

SPF states who can send email for your domain, DKIM signs messages, and DMARC states what to do when those checks fail.

We review them to reduce email impersonation.

It is the system your team or customers use today.

The public Radar does not enter that environment or review its code; doing so requires agreed scope and authorization.

AI means artificial intelligence. RAG connects an AI system to documents or reference data.

We review access and responses to prevent leaks and unintended uses.

These are the instructions an AI system receives.

We test whether external instructions can change its behavior beyond what is allowed.

It is a gateway through which two systems exchange data.

We review who can use it and what information they can access.

It is the management of identities and permissions.

We check whether each person or service has only the access they need.

It is a cloud services platform.

We review resources, networks, and permissions to find configurations that increase risks.

It is a controlled exercise using fake test messages.

It helps the team recognize deception attempts without exposing them to a real attack.

These are controlled, authorized security tests.

They confirm whether a weakness can cause a real impact.

It is a digital fingerprint calculated from a file.

It lets us check whether evidence changed after it was obtained.

It is the Mexican law protecting personal data held by private parties.

It guides our review of obligations that apply to data handling.

They are frameworks for assessing security controls and their documentation.

We review gaps that would need to be addressed before a formal assessment.

It means interest-free monthly installments.

Availability and the term are agreed when defining the payment method.