- Adds Network Scanning to Security Hub for probing resources from the internet and confirming actual public reachability.
- Generates a finding for each reachable port and service across AWS and Azure, auto‑correlating with existing exposure data.
- Complements existing configuration‑based reachability checks with real‑world scanning results.