EXAMPLE.BUSINESS · SAMPLE REPORT
Start with the fixes that matter.
Example summary: The site uses encrypted connections, but email authentication and some browser protections need attention. A scan describes what we can observe at the time; it is not a guarantee that a website is free of vulnerabilities.
1. Email impersonation protection
Priority: High in this example. An illustrative DNS review found no DMARC policy. Without a policy, receiving mail systems have less guidance when someone sends mail that pretends to come from your domain.
Next step: Inventory legitimate mail senders, validate SPF and DKIM, then introduce and monitor DMARC before moving to enforcement.
2. Browser security headers
Priority: Medium in this example. A Content Security Policy was not present on the sample response. This protection can help restrict unexpected scripts.
Next step: Test a policy in report-only mode, review legitimate resources, then enforce it without breaking the website.
3. Encrypted connections
Example result: No issue observed. The sample HTTPS connection and certificate checks passed at the time of the fictional check. Ongoing monitoring is still useful.
What comes with a paid scan?
- A plain-English report and technical observations.
- A prioritized fix list with practical next steps.
- A 30-minute walkthrough to discuss the findings.
Actual findings depend on the approved scope and what the checks can observe. We verify ownership and approve scope before checking a site.