Calculate network exposure score from open ports, public services, unprotected endpoints, and cloud misconfigs.