Vulnerability management
Single queue with the REAL findings aggregated from Domains, Web security, Cloud/SaaS and Mail. Prioritized by severity.
29
12
16
No
Vulnerability queue
Real data from the other modules · active scan pending authorization
| Finding | Source | Asset | |
|---|---|---|---|
| High | Registrador Spaceship. SIN SPF ni DMARC: cualquiera puede enviar correo como @dnxt.ai. Añadir SPF -all + DMARC p=reject. Publish/harden SPF, DKIM and DMARC (see Domains module). | Domains | dnxt.ai |
| High | 1/7 cabeceras (solo HSTS): faltan CSP/XFO/XCTO/Referrer/Permissions/COOP Review headers/TLS/secrets and RLS (see Web security module). | Webs | diamondnxt.com |
| High | Redirige a HugeDomains (dominio APARCADO / en venta): no sirve vuestra web Review headers/TLS/secrets and RLS (see Web security module). | Webs | liquiid.com |
| High | 1/7 cabeceras (solo HSTS) Review headers/TLS/secrets and RLS (see Web security module). | Webs | dnxtpro.com |
| High | Servidor Express propio (no Netlify): más superficie de ataque Review headers/TLS/secrets and RLS (see Web security module). | Webs | dnxtrwa.com |
| High | No responde (offline o DNS sin configurar): no evaluable Review headers/TLS/secrets and RLS (see Web security module). | Webs | dourofornitures.com |
| High | Aparcado en HugeDomains (en venta / no controlado) Review headers/TLS/secrets and RLS (see Web security module). | Webs | i-sleep.com |
| High | No responde (offline o DNS sin configurar): no evaluable Review headers/TLS/secrets and RLS (see Web security module). | Webs | 3d-coworking.com |
| High | Forzar verificación en 2 pasos (MFA) a los 11 usuarios MFA, key rotation and least privilege (see Cloud/SaaS). | Cloud/SaaS | Google Workspace |
| High | Verificar RLS en todas las tablas MFA, key rotation and least privilege (see Cloud/SaaS). | Cloud/SaaS | Supabase |
| High | MFA en la cuenta MFA, key rotation and least privilege (see Cloud/SaaS). | Cloud/SaaS | Netlify |
| High | MFA obligatorio MFA, key rotation and least privilege (see Cloud/SaaS). | Cloud/SaaS | Dropbox |
| Medium | SPF OK, DKIM activo (clave de 1024 bits → rotar a 2048) y DMARC en p=none (solo monitoriza). Subir DMARC a reject. Publish/harden SPF, DKIM and DMARC (see Domains module). | Domains | diamondnxt.com |
| Medium | Microsoft 365: SPF -all y DKIM (selector1/2) activos, pero FALTA DMARC. Crear DMARC. Publish/harden SPF, DKIM and DMARC (see Domains module). | Domains | yachtsales24.com |