SAMPLE 01
E-commerce · 50–100 staff
A report example for 18 hosts. Anonymised synthetic data, not a real client record.
Report example — report.example
SAMPLE 01
2High
High2
Medium3
Low6
Info4
| Check | Layer | Result | Detail |
|---|---|---|---|
| DNS / NS / MX | passive | OK | 2 NS, 1 MX |
| SPF / DMARC / DKIM | passive | CHECK | DMARC missing |
| Certificate transparency | passive | OK | 11 subdomains |
| Subdomain discovery | passive | OK | 18 hosts |
| TLS / certificate | light | OK | TLS 1.3 |
| Security headers | light | CHECK | No CSP |
| CMS / plugin versions | light | HIGH | PHP EOL |
| Archived exposure | passive | OK | 0 risky URLs |
HighPHP 7.4 is end-of-life
ImpactNo security fixes have been provided since 2022-11-28.
ActionUpgrade to a supported release and remove unused extensions.
MediumDMARC record missing
ImpactReceivers cannot evaluate spoofing, leaving room for brand abuse.
ActionStart at p=none and tighten gradually using aggregate reports.
LowCAA record missing
ImpactAny certificate authority may issue certificates for the domain.
ActionRestrict issuance to the CAs you actually use.