Sample extract · Fictional firm
The picture at a glance.
Example firm · firm.example
The illustrative findings show an email authentication policy in place and website settings that warrant a closer review.
Where the firm stands
Email sits above the peer midpoint in this example. Website security sits below it. These are separate areas to discuss with the team responsible.
A peer comparison puts the findings in context. It does not establish that a firm is secure or compliant.
Sample extract · Fictional finding
Behind the headline.
Website security headers
Example observation: a Content-Security-Policy header was not observed in the response from the checked page.
Why take a closer look?
This policy can help a browser restrict the content a page is allowed to load. Its absence is a configuration question to investigate, not proof that the website has been compromised.
What accompanies a finding
The checked URL, observation time, supporting response detail and any limits on what the check could establish.
Sample extract · Questions to take forward
Make the next conversation easier.
Use the findings to ask specific questions of your IT team or provider.
- Is the observed setting intentional?
- Does it apply across the relevant websites, or only this page?
- What would you recommend changing, and who owns that work?
- When should we check again?
Want to know what changes after this review? Continuous follows the picture over time.