Security & safe scanning

• Public-only crawling — ACS does not scan private or login-gated pages.
• URL safety — only http/https; localhost, private IPs, and internal network targets are rejected.
• No authentication bypass.
• No form submission.
• No checkout execution.
• robots.txt is respected; ACS does not impersonate Googlebot.
• Bounded crawl limits (pages, depth, runtime, size).