Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production