External attack surface, dark web credential leaks, breach history, and email security assessed in 5–7 days with no target contact required.