SpectraAn attacker's view, one move ahead.
JAENSign in

example.comReport

This is a sample. Its subject, example.com, is a domain reserved for documentation — not any customer's site. The judgements, however, are real: synthetic observations were run through the actual evaluation engine to produce it.

Summary Detail

Overall

AScore 90 / 100

Inspection coverage 97%

active checks were requested, but a small part could not be confirmed

  • 19Action required
  • 2Not inspected
  • 5Not applicable
  • 81Compliant

By category

Bars Radar

DNS & mailExposureFuture readinessImpersonationLeaksReputationSupply chainTLS & certificatesWeb & HTTP
The numbers live on the bar view; the radar shows the overall shape. A category that was not inspected has no vertex.

19 to act on, by severity

  1. medium
    Sign the zone with DNSSEC and register the DS recordexample.com · gain +2 pts
    Detail ›
  2. medium
    Restrict framing with X-Frame-Options or frame-ancestorsexample.com · gain +1 pts
    Detail ›
  3. medium
    Restrict administrative ports to trusted source addresses192.0.2.1 (example.com - www.example.com) · gain no change
    Detail ›
  4. low
    Publish TLSA records for the mail exchangers to enable DANEexample.com · gain +1 pts
    Detail ›
  5. low
    Add AAAA records so IPv6 clients can reach youexample.com · gain +1 pts
    Detail ›
  6. low
    Scope the breach, reset passwords, and invalidate sessionsexample.com · gain +1 pts
    Detail ›
  7. low
    Publish a CAA record restricting which CAs may issueexample.com · gain no change
    Detail ›
  8. low
    Raise the DMARC policy in stages up to p=rejectexample.com · gain no change
    Detail ›
  9. low
    Publish the MTA-STS policy file and set mode to enforceexample.com · gain no change
    Detail ›
  10. low
    Add a second, independent MX hostexample.com · gain no change
    Detail ›
  11. low
    Change the SPF record to end in -allexample.com · gain no change
    Detail ›
  12. low
    Publish a TLS-RPT recordexample.com · gain no change
    Detail ›
  13. low
    Add HttpOnly to the session cookiesexample.com · gain no change
    Detail ›
  14. low
    Set COOP and CORP to isolate the pageexample.com · gain no change
    Detail ›
  15. low
    Set and serve a Content-Security-Policy headerexample.com · gain no change
    Detail ›
  16. low
    Disable the features you do not use with Permissions-Policyexample.com · gain no change
    Detail ›
  17. low
    Set a restrictive Referrer-Policyexample.com · gain no change
    Detail ›
  18. info
    Publish ECH configuration in the HTTPS recordexample.com · gain no change
    Detail ›
  19. info
    Enable HTTP/3 and advertise it in the HTTPS recordexample.com · gain no change
    Detail ›

Each figure is how much the overall score rises if that one item alone is fixed. Category scores and their weighted average are each rounded to whole numbers, so the figures for several items do not add up to the rise from fixing them together.

Collection

Back to top