SAMPLE 03
Manufacturing · 300–1000 staff
A report example for 26 hosts. Anonymised synthetic data, not a real client record.
Report example — report.example
SAMPLE 03
0High
High0
Medium2
Low9
Info3
| Check | Layer | Result | Detail |
|---|---|---|---|
| DNS / NS / MX | passive | OK | 2 NS, 1 MX |
| SPF / DMARC / DKIM | passive | OK | DMARC p=quarantine |
| Certificate transparency | passive | CHECK | Unexpected subdomain |
| Subdomain discovery | passive | OK | 26 hosts |
| TLS / certificate | light | CHECK | TLS 1.0 enabled |
| Security headers | light | OK | HSTS / CSP present |
| CMS / plugin versions | light | OK | No EOL versions |
| Archived exposure | passive | OK | 0 risky URLs |
MediumLegacy TLS 1.0 still enabled
ImpactLegacy cipher suites can still be negotiated, which may fail compliance requirements.
ActionRestrict to TLS 1.2 or later and disable legacy protocols.
MediumCAA record missing
ImpactAny certificate authority may issue certificates for the domain.
ActionRestrict issuance to the CAs you actually use.
LowUnused subdomain is public
ImpactAn unmanaged host could be used as an entry point.
ActionRemove unused DNS records or bring them under management.