Rariveil does not rank a company from a root domain alone.

Customer-provided starting scope

The customer provides a root domain and a small known scope. Rariveil treats that input as a starting point, not as a complete inventory of the company.

Scope challenge generated before ranking

The provided scope includes the marketing website and customer portal, but no API, admin portal, identity provider, mobile app, or data store was provided.

Before ranking can be trusted, confirm whether these surfaces exist:
1. Public API
2. Admin portal
3. Identity provider
4. Customer database
5. Mobile application backend
6. Support or billing portal

Why this matters

If important surfaces are missing, any ranking can look precise while still being incomplete. Rariveil should not blindly trust a partial customer asset list, and it should not blindly scan the internet. The correct step is assisted scope discovery followed by customer confirmation.

Expected customer outcome

• A clearer list of confirmed assets.
• A short list of missing surfaces that must be confirmed or ruled out.
• A safer decision scope before any pre-validation ranking.
• A stronger final report because the ranking is based on confirmed business context.

Boundary

This demo is context-only. It does not perform active testing, login attempts, proof execution, exploitation, or technical validation. It demonstrates how Rariveil challenges scope before producing a decision report.