Sample deliverable
From finding to remediation.
This educational example illustrates how to read a finding and discuss it with your provider. It is not a customer result or a scan performed on a third party.
FICTIONAL EXAMPLE · BROWSER PROTECTIONS
Protection against unauthorised embedding.
- Observation
- The examined page response provides neither a CSP frame-ancestors directive nor an X-Frame-Options header.
- Evidence to retain
- Checked URL, timestamp and response headers. An actual report presents the evidence available for the assessed website.
- Interpretation
- The check did not observe a restriction on iframe embedding. Priority depends on exposed functionality and intended integrations.
- Proposed action
- List domains allowed to embed the page, define an appropriate policy, test it in staging and deploy after approval.
- Verification
- Check response headers after the change and test legitimate integrations. Record the outcome and any exceptions.
- Limitation
- A missing header proves neither exploitation nor compromise. This check does not verify user-account permissions.
Your website. Its findings. Your priorities.
The paid report brings together automated findings, available evidence and recommendations in a downloadable PDF.