Developer Guide

ExposureX components:

• api: Go backend.
• ui: Next.js web console.
• agent: Go runner.
• sdk-go: scanner, parser, collector and CTIS helper interfaces.
• docs-site: public documentation site.

Development principles:

• Tenant-scoped data access.
• API-key auth for runner endpoints.
• CTIS normalization before ingest.
• Safe scanner execution with SSRF and dangerous flag guards.