Reading Reports

Interpret AYAsec reports, severity levels, evidence, grades, and recommended remediation steps after each scan.

Every scan report follows the same shape, whether it's TLS, HTTP, Ports, DNS, Credibility, or Discovery. This page is a tour of every section.

Header

Target, scan date, and a score ring showing the grade (A+ through F) and the 0-100 score. Below it, a row of severity counts - critical, high, medium, low, info - each clickable to jump straight to that group in the findings list.

Brief vs. Full

Reports open in Brief view: real issues only, worst severity first, nothing to scroll past. Switch to Full for everything - informational findings included - plus the scan's raw technical detail (open ports, DNS records, cipher suites, certificate chain, and so on). Your last-used view is remembered across reports. Both views export to PDF.

Findings

Grouped by severity into collapsible sections (low and info start collapsed). Each finding includes:

• Title and description - what was found and why it matters
• Recommendation - concrete remediation steps
• Affected host/port - where applicable, so you can trace it back to the raw technical detail in Full view

Vulnerabilities (CVEs)

Ports, HTTP, and Discovery reports include a dedicated Vulnerabilities section: every CVE matched against a detected technology version, with CVSS score, EPSS percentile, and a CISA KEV flag so you can prioritize by real-world exploitation likelihood rather than raw severity alone. If AYAsec couldn't auto-detect a technology's version, Set service versions lets you enter it manually so CVE matching can run against it; the "Latest: x.y.z" hint next to a version tells you how current it is. Clearing an override re-checks immediately and the section reverts on its own.

Technical detail (Full view)

Each scan type surfaces its own raw evidence: TLS shows the full certificate chain, cipher suite table, and browser/client compatibility; Ports shows every open port with service and version; DNS shows records, DNSSEC status, and email authentication; HTTP shows detected technologies, external services, and scan-level insights (status codes, methods, content types). Every section can be collapsed independently.

The Overall report

A target's Overall report rolls its five most recent core scans (TLS, HTTP, Ports, DNS, Credibility) into one weighted grade, with each contributing scan shown alongside its own score and weight. See Scoring for the exact weights.

Ask AYA

Every report has AYA, an AI assistant, docked to the page. AYA adapts to the scan type - for example, it focuses on protocol hardening in a TLS report, exposed services in a Ports report, and exploitability and unexpected hosts in Discovery. It sees the same findings, grades, and hosts you're looking at, so you can ask it to prioritize what to fix first instead of reading the whole report yourself.

Export

Reports export to PDF from either Brief or Full view, matching exactly what's on screen - useful for sharing a snapshot outside the dashboard.