Which tools is Gavin most likely using in the situation: He owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan that looks for common misconfigurations and outdated software versions.