Modular black-box web vulnerability scanner with Flask UI, PDF reporting, and GDPR/SOC2 compliance mapping