Navigate to the target web application URL, inspect browser-visible response headers, cookies, forms, scripts, and navigation flows, and analyze them for missing security headers, weak cookie settings, reflected input risk, information disclosure, insecure form handling, and other external web security issues. Return the findings in a structured report with severity, recommendations, and best practices observed.