Live demo · Any business with a website
Security scan report
A sample security scan report: findings by severity, a description and recommended fix for each, and a before/after comparison.
What does this demo show?
- Security score gauge
- Critical, high, medium and low findings
- Description and recommended fix for every finding
- Before / after remediation comparison
Demo — sample data
Security scan report
Target: example-shop.test
Security score
Security score: 35 / 100 · Weak
0 of 7 findings fixed
- Critical
- 1
- High
- 2
- Medium
- 2
- Low
- 2
Findings
7 findingsDescription
Admin accounts allow short, guessable passwords and two-factor authentication isn't required.
Recommended fix
Require passwords of at least 12 characters, a breached-password check and two-factor authentication for admins.
Description
The site uses old library versions for which security patches have been published.
Recommended fix
Update dependencies and add automated dependency checks to the maintenance routine.
Description
The admin login page is reachable with no limit on login attempts.
Recommended fix
Rate-limit login attempts and, if possible, restrict the panel with an IP allowlist.
Description
Browser-protecting headers such as Content Security Policy (CSP) and HSTS aren't set.
Recommended fix
Add CSP, HSTS, X-Content-Type-Options and Referrer-Policy headers.
Description
Response headers reveal the version of the software in use.
Recommended fix
Remove version information from response headers.
Description
Backups are taken, but restores aren't tried regularly.
Recommended fix
Test restoring from backup at set intervals and record the result.
Demo data lives only in your browser; nothing is saved or sent.
Let's adapt this demo to your business
Screens, fields and flow are tailored to your business. We clarify the scope together and send a written quote.
Share it
Send the link or print the QR code; it opens on a phone in one tap.
https://cinderhash.com/en/demo/security-scan