Reports

#A target's report

Each target's overview is its report. It sums up the findings by severity, then answers one question per topic:

Lookalike, subdomain and email sections appear on the domain's own target. Each section links to its own page with every row.

#Security score

The top of a target's report gives a quick read for anyone who doesn't want to go through findings: a Domain score for the site, servers, subdomains and lookalikes, and an Email score for its mail security, each from 0 to 100 on a coloured meter. A subdomain's target shows only the Domain score; its email is scored on the domain's own target.

The Targets list shows the same scores beside each target, so you can see every domain at a glance. Scores are recorded once a day; a week after the first, each one shows how far it moved since last week (▲ up, ▼ down).

Each score starts at 100, and every open finding takes points off: 40 for critical, 20 for high, 8 for medium and 3 for low. Informational findings and those set aside take nothing. Medium findings take at most 40 points in all and low ones at most 15, so many small issues make a score Weak, not 0. One critical finding keeps a score below 40, a high one below 70 and a medium one below 90.

A topic no scan has checked yet takes nothing off, so the card lists it under Not checked yet until its first scan runs.

The free email security checker shows an Email score for any domain, worked out the same way. It also checks DKIM, which the scanners don't, so its score can be lower than a target's.

#Printing

Print on a target's overview prints the whole report, every row of every section, ready to save as a PDF for a customer, an auditor or your own records.

#Email security reports

Mail providers send reports about mail for your domain. Point them at Akadenia Security and the Email security page shows them:

• DMARC reports: who sends mail as your domain, and whether it passes SPF and DKIM. Add our address to your DMARC record's rua; the page shows the exact record.
• SMTP TLS reports: whether mail to your domain arrived encrypted.
• Hosted MTA-STS: a policy that tells senders to deliver to your domain over TLS only, hosted for you. Add two DNS records once; the page walks you through testing, then enforcing.

If DMARC or TLS reports that used to come in stop for 3 days or more while the record is still in place, the card notes it: mail servers sometimes pause their reports and pick up again on their own. It's only a note on the card, with no email or alert.

Each record can be set in one click where your DNS provider supports it, or opened at your DNS host's settings, as for verifying a domain.

#Checking the email records

Once you've added a record, choose Verify now on its card (DMARC, SMTP TLS reporting or MTA-STS) to check it right away instead of waiting for the daily check. Like Check now for verifying a domain, it asks your domain's own nameservers, so a record you just saved is usually found at once.

Owners and admins can run it, once every 10 seconds per card; every member sees the last result, with who checked and when. After a one-click setup, it runs by itself on the card you set up when you come back from your DNS provider.

Each record gets a specific result:

For MTA-STS, once both records are in place, Verify now also starts the certificate for your policy host. The card shows its progress and updates by itself for a few minutes; when it's issued, the card says MTA-STS is being served, with a link to the policy.

#Pentest reports

When Akadenia runs a penetration test for you, its report appears under Reports once approved: scope, findings with evidence and recommendations, and retests. Every member of your organization can read it and download the PDF.