Security Overview
19 May – 18 Jun 2024
Security Score ⓘ
72 /100
↑ 8% Good
Critical ⓘ
2
↑ 1 vs last 30 days
High ⓘ
7
↓ 2 vs last 30 days
Medium ⓘ
18
↓ 3 vs last 30 days
Low ⓘ
12
↑ 2 vs last 30 days
Risk Trend (Last 30 Days)
— Critical
— High
— Medium
— Low
May 19
May 24
May 29
Jun 03
Jun 08
Jun 13
Jun 18
Risk Distribution ⓘ
39
Total Findings
🔴 Critical 2 (5%)
🟠 High 7 (18%)
🟡 Medium 18 (46%)
🔵 Low 12 (31%)
⚪ Info 0 (0%)
Recent Assessments
View All →| Assessment | Target | Status | Risk | Findings | Last Scan | |
|---|---|---|---|---|---|---|
| #1042 example.com |
example.comhttps://example.com |
Completed | High | 271812 | 18 Jun 2024 10:30 AM |
⋮ |
| #1043 shop.example.com |
shop.example.comhttps://shop.example.com |
Running | Medium | 0253 | 18 Jun 2024 09:15 AM |
⋮ |
| #1041 api.example.com |
api.example.comhttps://api.example.com |
Completed | High | 14126 | 17 Jun 2024 04:45 PM |
⋮ |
| #1040 test.example.com |
test.example.comhttps://test.example.com |
Completed | Low | 0128 | 16 Jun 2024 11:20 AM |
⋮ |
| #1039 dev.example.com |
dev.example.comhttps://dev.example.com |
Completed | Medium | 0364 | 15 Jun 2024 02:10 PM |
⋮ |
Showing 1 to 5 of 12 results
Quick Actions
New Assessment
Start a new security assessment
View Projects
Manage all your projects
View Findings
Browse all security findings
Generate Report
Create a new security report
Retest
Re-run assessment to verify fixes
Monitoring
View monitoring dashboard
Total Projects
12
All projects
Active Projects
9
Currently active
In Progress
2
Ongoing assessments
High Risk Projects
4
Require attention
Completed
18
This month
| Project | Targets | Status | Risk ⓘ | Findings | Last Assessment | Actions |
|---|---|---|---|---|---|---|
| Loading projects... | ||||||
Showing 1 to 6 of 12 projects
Assessment #1042
Running
https://example.com
Scan Profile
🛡️
Standard (Recommended)
Authorization
Authorized
By Rahul Sharma (CTO)
Scope
example.com
5 subdomains
Scan Started
19 May 2024, 10:30 AM
2m 34s ago
Estimated Time
6 - 10 minutes
Depends on target size
Scan ID
#1042
📋
Scan Progress
42%
Scanning... Discovering and analyzing target
Elapsed Time: 00:02:34
🛡️
1. Authorization Check
Validating authorization and scope
✓ Completed
00:00:05
🌐
2. Scope Validation
Validating in-scope and out-of-scope domains
✓ Completed
00:00:08
🔍
3. Discovery
Discovering subdomains, hosts, and assets
✓ Completed
128 Assets
🔗
4. URL Discovery
Brute forcing, crawling and collecting URLs
In Progress
1,248 URLs
⚙️
5. Parameter Discovery
Analyzing parameters in discovered URLs
🕒 Pending
0
💻
6. Content & Tech Analysis
Analyzing technologies and page content
🕒 Pending
0
🛡️
7. Security Checks
Running vulnerability and misconfiguration checks
🕒 Pending
0
📊
8. Results Processing
Generating findings and risk analysis
🕒 Pending
0
📄
9. Report Generation
Preparing scan report
🕒 Pending
0
ℹ️
Please do not close this page. You will be notified when the scan is completed.
Scan Statistics
View Details
Discovered URLs
1,248
(+312 new)
Discovered Assets
128
(+18 new)
Parameters Found
356
(+105 new)
Forms Found
35
(+6 new)
API Endpoints
23
(+4 new)
Technologies
12
(+2 new)
Live Activity
View All Logs
10:32:45
DISCOVERY
Discovered subdomain: api.example.com
10:32:41
CRAWLER
Crawled: https://example.com/about
10:32:38
CRAWLER
Crawled: https://example.com/products
10:32:35
PARAM
Found parameter: q in /search?q=test
10:32:31
DISCOVERY
Discovered asset: static.example.com
10:32:28
CRAWLER
Crawled: https://example.com/login
10:32:24
PARAM
Found parameter: id in /product?id=1
10:32:20
DISCOVERY
Discovered subdomain: cdn.example.com
Scan Configuration
Scan Profile Standard (Recommended)
Scan Type Full Scan
Crawl Type Hybrid (Smart)
Max Threads 25
Request Delay 100ms
User Agent SecureScope Bot
Attack Surface
Visualize and explore the discovered attack surface of the targetAttack Surface Graph ⓘ
● Web Application
● Subdomain
● API
● External Asset
● Sensitive Path
● Parameter
● High Risk
Discovered Assets (428)
| Asset | Type | Status | Source | Risk | Discovered On | Actions |
|---|---|---|---|---|---|---|
| 3 https://www.example.com/ | Web Page | 200 OK | Crawler | Low | 19 May 2024, 10:15 AM | ⋮ |
| 2 https://api.example.com/v1/users | API Endpoint | 200 OK | Crawler | Medium | 19 May 2024, 10:16 AM | ⋮ |
| 3 https://login.example.com/ | Web Page | 200 OK | Passive | Medium | 19 May 2024, 10:16 AM | ⋮ |
| 3 https://www.example.com/search?q=test | Parameter | 200 OK | Crawler | High | 19 May 2024, 10:17 AM | ⋮ |
| 3 https://www.example.com/admin | Sensitive Path | 403 Forbidden | Crawler | High | 19 May 2024, 10:17 AM | ⋮ |
Showing 1 to 5 of 428 assets
Attack Surface Summary
Total Assets
428
(+32 new)
Subdomains
36
(+5 new)
URLs
312
(+24 new)
APIs
48
(+6 new)
Parameters
152
(+18 new)
External Assets
27
(+3 new)
Asset Types
View All
428
Total
● Web Pages 176 (41.1%)
● APIs 48 (11.2%)
● Subdomains 36 (8.4%)
● Parameters 152 (35.5%)
● External Assets 16 (3.7%)
Top Subdomains
View All
🔮 api.example.com
48 Endpoints >
🔮 login.example.com
24 Endpoints >
🔮 shop.example.com
102 URLs >
🔮 blog.example.com
64 URLs >
🔮 static.example.com
18 Assets >
Discovery Sources
View All
Crawler
72% 308
Passive
18% 77
Sitemap
6% 26
Manual
4% 17
Findings
Review and manage the security findings discovered in this assessment.
⚙️
Total Findings
39
+8 new
🛡️
Critical
2
+1 new
☣️
High
7
+2 new
🔍
Medium
18
+4 new
🎯
Low
10
+1 new
ℹ️
Informational
2
No new
| Finding | Severity | Status | Confidence | Category | Affected Asset | Discovered On | Actions |
|---|---|---|---|---|---|---|---|
|
🛡️
SQL Injection (Union Based)
/search?q=test |
Critical | Open | ● High | Injection | https://example.com/search | 19 May 2024 10:17 AM |
⋮ |
|
🛡️
Authentication Bypass
/api/auth/login |
Critical | Open | ● High | Authentication | https://api.example.com | 19 May 2024 10:32 AM |
⋮ |
|
☣️
Broken Access Control
/api/user/123 |
High | Open | ● High | Access Control | https://api.example.com | 19 May 2024 10:40 AM |
⋮ |
|
☣️
Sensitive Data Exposure
/user/profile |
High | Open | ● Medium | Data Exposure | https://api.example.com | 19 May 2024 10:48 AM |
⋮ |
|
☣️
Cross-Site Scripting (Reflected)
/search?q=<script>alert(1)</script> |
High | Open | ● High | XSS | https://example.com/search | 19 May 2024 11:02 AM |
⋮ |
|
🔍
Security Misconfiguration
/ |
Medium | Open | ● Medium | Configuration | https://example.com | 19 May 2024 11:25 AM |
⋮ |
|
🔍
Missing Security Headers
/ |
Medium | Open | ● Medium | Best Practices | https://example.com | 19 May 2024 11:27 AM |
⋮ |
|
🎯
Information Disclosure
/server-status |
Low | Open | ● Low | Information Disclosure | https://example.com/server-status | 19 May 2024 11:32 AM |
⋮ |
|
🎯
Directory Listing Enabled
/assets/ |
Low | Open | ● Low | Configuration | https://example.com/assets | 19 May 2024 11:41 AM |
⋮ |
|
ℹ️
Outdated jQuery Library
/assets/js/jquery.min.js |
Informational | Open | ● Low | Best Practices | https://example.com | 19 May 2024 11:50 AM |
⋮ |
Showing 1 to 10 of 39 findings
SQL Injection (Union Based)
Critical
Affected Asset
https://example.com/search?q=test
Finding ID SS-1042
Retesting —
Category SQ-1042
Confidence High
Severity 🔴 High
Status ● Open
Discovered On 19 May 2024, 10:17 AM
Last Seen 19 May 2024, 10:17 AM
Description
The application is vulnerable to SQL Injection via the "q" parameter in the /search endpoint. The application appears to be directly concatenating user-supplied input into SQL queries.
CVSS v3.1 Score
9.1
Critical
AV:N/AC:L/PR:N/UI:N
S:U/C:H/I:H/A:H 🔗
Tags
owasp-a03:2021
cwe-89
sqli
input-validation
Reports
View, manage and download security assessment reports
📄
Total Reports
15
↑ 3 this month
🟢
Completed Reports
11
↑ 2 this month
🟠
Pending Reports
2
No change
🛡️
Reports with Critical
4
↑ 1 this month
📥
Total Downloads
23
↑ 7 this month
| Report | Target | Project | Scan Date | Findings | Risk Summary | Status | Actions |
|---|---|---|---|---|---|---|---|
|
📄
Assessment #1042
Full Security Assessment |
https://example.com 93.184.216.34 |
ABC Technologies | 19 May 2024 10:30 AM |
39 2 Critical |
2
7
18
10
2
CHMLInfo
|
Completed |
|
|
📄
Assessment #1041
Full Security Assessment |
https://api.example.com 93.184.216.35 |
ABC Technologies | 18 May 2024 04:15 PM |
28 1 Critical |
1
5
10
8
4
CHMLInfo
|
Completed |
|
|
📄
Assessment #1040
Vulnerability Assessment |
https://staging.example.com 93.184.216.36 |
ABC Technologies | 17 May 2024 09:05 AM |
17 0 Critical |
0
2
6
7
2
CHMLInfo
|
Completed |
|
|
📄
Assessment #1039
API Security Assessment |
https://api.example.com/v1 93.184.216.35 |
XYZ Company | 16 May 2024 11:20 AM |
31 2 Critical |
2
6
14
6
3
CHMLInfo
|
Completed |
|
|
📄
Assessment #1038
Full Security Assessment |
https://shop.xyz.com 93.184.216.37 |
XYZ Company | 15 May 2024 02:45 PM |
22 1 Critical |
1
4
9
6
2
CHMLInfo
|
Completed |
|
|
📄
Assessment #1037
Full Security Assessment |
https://blog.acme.com 93.184.216.38 |
Acme Corporation | 14 May 2024 10:10 AM |
12 0 Critical |
0
1
4
5
2
CHMLInfo
|
Completed |
|
|
📄
Assessment #1036
Vulnerability Assessment |
https://internal.globex.com 10.0.0.15 |
Globex Inc. | 13 May 2024 06:25 PM |
8 0 Critical |
0
0
3
4
1
CHMLInfo
|
Completed |
|
|
📄
Weekly Summary Report
Summary Report |
Multiple Targets 5 target(s) |
— | 12 May 2024 11:59 PM |
— | — | Completed |
|
Showing 1 to 8 of 15 reports
Reports Overview
15
Total
● Completed 11 (73.3%)
● Pending 2 (13.3%)
● Failed 1 (6.7%)
● Cancelled 1 (6.7%)
Top Risk by Reports
View All● Critical 4
● High 9
● Medium 32
● Low 18
● Informational 7
Recent Downloads
View All
Assessment #1042 Report.pdf
19 May 2024, 10:32 AM
Assessment #1041 Report.pdf
18 May 2024, 04:17 PM
Weekly Summary Report.xlsx
12 May 2024, 11:59 PM
Assessment #1040 Report.pdf
17 May 2024, 09:07 AM
Assessment #1039 Report.pdf
16 May 2024, 11:22 AM
ⓘ Reports are automatically deleted after 90 days.
Change
Total Targets
18
All time
Active Targets
12
Currently active
Paused Targets
2
On hold
Expired Targets
4
Authorization expired
Archived Targets
3
Not in use
| Target | Project | Status | Authorization | Scope | Last Scan | Actions |
|---|---|---|---|---|---|---|
|
🌐
example.com
https://example.com Primary |
ABC Technologies | ● Active | 🛡️ Authorized by Client | example.com *.example.com +2 more |
19 May 2024 10:30 AM |
⋮ |
|
🌐
api.example.com
https://api.example.com |
ABC Technologies | ● Active | 🛡️ Authorized by Client | api.example.com *.api.example.com |
18 May 2024 04:15 PM |
⋮ |
|
🌐
staging.example.com
https://staging.example.com |
ABC Technologies | ● In Progress | 🛡️ Authorized by Client | staging.example.com | 19 May 2024 09:05 AM |
⋮ |
|
🌐
shop.xyz.com
https://shop.xyz.com |
XYZ Company | ● Active | 🛡️ Authorized by Client | shop.xyz.com *.shop.xyz.com +1 more |
17 May 2024 11:20 AM |
⋮ |
|
🌐
blog.acme.com
https://blog.acme.com |
Acme Corporation | ● Expired | 🛡️ Expired on 10 May 2024 | blog.acme.com | 10 May 2024 02:45 PM |
⋮ |
|
🌐
internal.globex.com
https://internal.globex.com |
Globex Inc. | ● Paused | 🛡️ Authorized by Client | internal.globex.com | Never | ⋮ |
Showing 1 to 6 of 18 targets
Target Details
🌐
example.com
● Active
🔗 https://example.com
Primary target
Project ABC Technologies
Target Type Web Application
Authorization Authorized by Client
Authorized By Rahul Sharma (CTO)
Authorization Date 10 May 2024
Expiration Date 10 Aug 2024 (83 days left)
Scope
example.com
*.example.com
static.example.com
+2 more
*.example.com
static.example.com
+2 more
Description
Main corporate website and all related subdomains in scope for security assessment.
Tags
Production
B2C
High Priority
Last Scan 19 May 2024, 10:30 AM
Next Scan 26 May 2024, 10:00 AM
Total Scans 8
Open Findings
2
7
18
12
🔄 Retest Engine & Fix Verification
1-Click automated re-verification of reported vulnerabilities to confirm fix compliance.
| Finding Code | Vulnerability | Target | Retest Status | Last Retest | Action |
|---|---|---|---|---|---|
| SEC-001 | Missing Strict-Transport-Security (HSTS) Header | https://bank.example.com/ | FIXED | Today 10:15 AM | |
| SEC-002 | Session Cookie Missing HttpOnly & SameSite Flags | https://bank.example.com/login | STILL PRESENT | Yesterday 04:20 PM |
👁️ 24/7 Continuous Monitoring Dashboard
Automated cron schedules monitoring attack surfaces and sending instant alerts on perimeter changes.
MONITORED TARGETS
12 Domains
SCAN INTERVAL
Every 24 Hours
HEALTH STATUS
100% Operational
👥 Team & Role Access Control (RBAC)
| User Name | Email Address | Role | Status |
|---|---|---|---|
| Himanshu | admin@securescope.io | Administrator | Active |
| Security Analyst | analyst@securescope.io | Security Analyst | Active |
| Rahul Sharma | dev@securescope.io | Developer | Active |
🔌 Integrations & Webhooks
Connect SecureScope to your issue tracker and alert channels.
Jira Software
Auto-create Jira tickets for P0/P1 findings.
Slack Alerts
Receive instant Slack webhooks on critical vulnerabilities.
Custom Webhook
HTTP POST payloads to your API endpoint.
🔑 Developer API & JWT Tokens
REST API token for CI/CD pipeline security integration.
securescope_jwt_secret_key_v2_9f83a7102b3c4d5e6f7a8b9c0d1e2f3a
📜 ScopeGuard Audit Trail & Activity Logs
Loading audit logs...
⚙️ Platform Security Settings
💳 License & Enterprise Subscription
Current Plan: Enterprise SaaS Unlimited Plan
Active • Self-Hosted cPanel / VPS License