Security Dashboard

Overview of your security posture — Acme Corp

Last updated: Feb 15, 2026 14:32 UTC
Risk Score
72
Medium Risk
Total Scans
3
↑ 1 this month
Vulnerabilities
23
3 critical
Assets Monitored
3
domains & subdomains
Critical Issues
3
⚠ Requires attention

Severity Distribution

Vulnerability Trend (6 Months)

Recent Scan Activity

example.comFull Scan
Feb 15, 2026 23 findings
shop.acme-corp.comQuick Scan
Feb 10, 2026 12 findings
api.acme-corp.comWeb Scan
Feb 5, 2026 8 findings

Scan History

All completed security scans

Target Type Status Date Findings Actions
example.com
93.184.216.34
Full Scan Completed Feb 15, 2026 23
shop.acme-corp.com
104.21.45.12
Quick Scan Completed Feb 10, 2026 12
api.acme-corp.com
104.21.45.13
Web Scan Completed Feb 5, 2026 8

Vulnerabilities

23 vulnerabilities across all assets

Severity Vulnerability CVE Asset Scanner

Reports

Security assessment reports for your assets

Feb 15, 2026 23 findings

example.com — Full Scan

Comprehensive security assessment including port scanning, web application testing, and SSL analysis.

3 Critical 5 High 8 Medium
Feb 10, 2026 12 findings

shop.acme-corp.com — Quick Scan

Rapid security check covering common vulnerabilities, SSL configuration, and security headers.

2 High 5 Medium 5 Low
Feb 5, 2026 8 findings

api.acme-corp.com — Web Scan

API endpoint security assessment covering authentication, injection flaws, and rate limiting.

1 High 4 Medium 3 Low

Assets

Monitored domains and subdomains

High Risk
82

example.com

Primary domain • 93.184.216.34

23
Vulns
3
Scans
3
Critical
Last scan: Feb 15, 2026
Medium Risk
58

shop.acme-corp.com

E-commerce • 104.21.45.12

12
Vulns
1
Scans
0
Critical
Last scan: Feb 10, 2026
Low Risk
35

api.acme-corp.com

REST API • 104.21.45.13

8
Vulns
1
Scans
0
Critical
Last scan: Feb 5, 2026

Compliance Dashboard

OWASP Top 10

92%

9 of 10 categories covered

PCI DSS 4.0

78%

9 of 12 requirements met

SOC 2 Type II

72%

8 of 12 controls implemented

HIPAA

95%

12 of 12 safeguards active

ISO 27001

88%

13 of 13 controls addressed

GDPR

100%

All 12 articles compliant

AI Fix Plan

AI-prioritized remediation plan with copy-paste fix scripts

Security Debt Burndown

#1

Update TLS Configuration

CRITICAL

Enforce TLS 1.2+ and disable weak cipher suites across all endpoints. Affects 4 vulnerabilities.

🔧 Fix Script (copy-paste ready)
# nginx.conf
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384';
ssl_prefer_server_ciphers on;
#2

Add Security Headers

HIGH

Missing Content-Security-Policy, X-Frame-Options, and Permissions-Policy headers. Affects 6 vulnerabilities.

🔧 Fix Script (copy-paste ready)
add_header Content-Security-Policy "default-src 'self'";
add_header X-Frame-Options "DENY";
add_header Permissions-Policy "camera=(), microphone=()";
#3

Patch jQuery 3.4.1 → 3.7.1

MEDIUM

Known XSS vulnerability in jQuery < 3.5.0. Upgrade to latest version. Affects 2 vulnerabilities.

Attack Surface Discovery

12
Subdomains
47
Open Ports
3
Exposed Services
2
Leaked Credentials

Discovered Subdomains

mail.acme-corp.comSecure
staging.acme-corp.comExposed
dev.acme-corp.comWarning
cdn.acme-corp.comSecure
vpn.acme-corp.comSecure

Threat Intelligence Feed

CVE-2026-0142 — Apache Struts RCE

CRITICAL

Remote code execution via crafted Content-Type header. CVSS 9.8. Active exploitation in the wild.

Published: Feb 20, 2026⚡ Matches your stack

CVE-2026-0098 — OpenSSL Buffer Overflow

HIGH

Heap buffer overflow in X.509 certificate verification. CVSS 7.5. Patch available.

Published: Feb 18, 2026OpenSSL 3.0.x affected

CVE-2026-0215 — WordPress Plugin SQLi

MEDIUM

SQL injection in WP Contact Form plugin versions < 5.2.1. CVSS 6.5.

Published: Feb 15, 2026No match in your assets
This is a demo with sample data. Create an account to scan your own domains.
Sign In Register Free