**Value:** 4/10 | **Phase:** 3\n\nMonitors CT logs for unexpected certificates issued for configured domains, alerting on potential certificate mis-issuance or domain hijacking.