import type { AuditContext } from '@cclabsnz/sf-core';
import type { SecurityCheck, CheckResult } from '../SecurityCheck.js';
/**
 * Audits classic Force.com Sites (Visualforce sites), a public unauthenticated
 * surface that runs in PARALLEL to Experience Cloud and is missed by the
 * Network-based guest checks. Each active classic site has its own guest user
 * whose profile can expose Apex, Visualforce pages, and objects to anonymous
 * visitors (the vector behind classic `/apex/…` public pages).
 */
export declare class ClassicSitesCheck implements SecurityCheck {
    readonly id = "classic-sites";
    readonly name = "Classic Force.com Sites";
    readonly category = "Access Control";
    readonly description = "Flags active classic (Visualforce) Force.com Sites and their guest users \u2014 an unauthenticated public surface separate from Experience Cloud";
    run(ctx: AuditContext): Promise<CheckResult>;
}
//# sourceMappingURL=ClassicSitesCheck.d.ts.map