BaselineSec Sample Security Assessment

/ 100

NEEDS ATTENTION

Executive Summary

BaselineSec assigned a security score of 74/100, rated NEEDS ATTENTION. The assessment identified configuration weaknesses requiring attention.

This sample demonstrates how BaselineSec evaluates observable DNS, email-security, TLS, HTTPS, and HTTP security-header configuration.

HIGH 1

MEDIUM 2

LOW 2

INFO 5

PASS 6

WARN 3

FAIL 1

HIGH MAIL-002 — DMARC policy
Publish an appropriate DMARC policy after verifying SPF and DKIM alignment.

MEDIUM HTTP-001 — HTTP Strict Transport Security
Add HSTS after confirming HTTPS is correctly configured across the domain.

MEDIUM TLS-002 — TLS certificate expiration
Plan certificate renewal and verify automated renewal is functioning.

Severity	Check	Finding	Status	Evidence	Recommendation
INFO	DNS-001	Domain address records	PASS	A record observed for example-business.com.	Review address records periodically and remove unused records.
HIGH	MAIL-002	DMARC policy	FAIL	No DMARC record found at _dmarc.example-business.com.	Publish a DMARC policy after verifying SPF and DKIM alignment.
MEDIUM	HTTP-001	HTTP Strict Transport Security	WARN	Strict-Transport-Security response header not detected.	Add HSTS after confirming HTTPS is correctly configured.
MEDIUM	HTTP-002	Content Security Policy	WARN	Content-Security-Policy response header not detected.	Implement a CSP appropriate for the site's resources and applications.
LOW	HTTP-003	Content Type Protection	WARN	X-Content-Type-Options not detected.	Add X-Content-Type-Options: nosniff.

BaselineSec performs non-destructive configuration checks against the assessed domain.
The assessment does not constitute a penetration test, vulnerability assessment, or guarantee that the environment is secure.
Results reflect observable configuration at the time of assessment and may change after DNS, hosting, certificate, or application changes.
The assessment is performed only after authorization is explicitly confirmed.