Example Scan Results
Here's what a typical vulnerability scan report looks like. Each finding includes a severity rating, how confident we are in it, OWASP category mapping, evidence, and actionable remediation guidance. CVSS scores are shown for findings tied to a published CVE.
Note: These are illustrative examples. Actual results vary based on the target website.
Known Vulnerability: CVE-2024-21762
Detected software version is affected by CVE-2024-21762 (CVSS 9.8). Listed in the CISA Known Exploited Vulnerabilities catalog - actively exploited in the wild.
Apply the vendor patch immediately. Because this vulnerability is under active exploitation, treat it as an incident-priority fix rather than routine maintenance.
Origin Server IP Exposed (WAF Bypass Possible)
example-corp.com is fronted by a CDN, but the site was successfully retrieved by connecting directly to api.example-corp.com (203.0.113.42). That address returned this site's own content, confirming the protection layer can be bypassed.
Restrict the origin server's firewall to accept traffic only from your CDN provider's IP ranges, and avoid exposing the origin through unproxied subdomains.
Missing Content Security Policy (CSP)
No Content-Security-Policy header was returned on any response, leaving the site without browser-enforced protection against cross-site scripting and data injection.
Implement a strict CSP header, for example: default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;
DMARC Policy Not Enforced (p=none)
A DMARC record exists but is set to p=none, which only monitors. Recipients are not instructed to reject or quarantine forged mail, so attackers can still send email that appears to come from your domain.
Move DMARC to p=quarantine, then p=reject with pct=100 once monitoring reports confirm legitimate mail passes.
[admin.example-corp.com] Weak Cipher Suites Detection
A subdomain discovered during attack-surface mapping accepts cipher suites no longer considered strong. This host is reachable and not behind the CDN, so it was tested directly.
Restrict the TLS cipher suite list on this host to modern AEAD ciphers, matching the configuration used on your primary domain.
Decommissioned Subdomain: legacy.example-corp.com
This name appears in public certificate transparency logs but no longer resolves to any address. It is a leftover from a retired service rather than an active risk.
Remove the stale DNS entry and any unused certificates to keep your published attack surface accurate.
Ready to scan your website?
Get the same comprehensive assessment for your domain. No account required - results delivered to your inbox.
Scan Your Website