1
Executive summary
Main findings explained clearly.
Security Exposure Report
Understand your publicly visible digital exposure
SER provides a clear view of what can be observed from the Internet, together with prioritised recommendations.
The principle
Observe before proposing
SER relies on publicly accessible information and non-destructive technical checks.
Important: SER is a first-level external assessment. It does not replace a full security audit.
What we check
- Your domain name and DNS configuration
- Email protection against spoofing (SPF, DKIM, DMARC)
- Security of exchanges with your website (HTTPS, TLS certificate)
- Website security protections (HTTP headers, HSTS, CSP)
- Services accessible from the Internet (exposed ports and services)
- Technologies publicly visible on the website (fingerprinting)
- Publicly accessible technical information (OSINT / external exposure)
- Potential reputation or compromise signals (blacklists, domain reputation)
The report
Readable by management and useful to technical teams
2
Priorities and impact
Actions ranked according to priority and potential business impact.
3
Technical detail
Useful information for your internal team or service provider.
The method
Five steps
1
Collect
Gather relevant external information.
2
Analyse
Identify gaps and points requiring attention.
3
Explain
Translate technical findings into understandable issues.
4
Prioritise
Rank the actions that deserve attention.
5
Support
Help address them directly or with your service provider.
Who is SER for?
SMEs, hotels, restaurants, agencies, professional firms, yachting businesses and organisations using a professional website or email domain.
Human accountability: SER automates part of the observation and analysis. Conclusions that require a decision or support remain validated and explained by Thierry Sconetti.