[ { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-01", "organization": "Lab Transport 01 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L01-IP1", "type": "ip", "value": "203.0.113.11" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "medium", "findings": [ { "key": "ssh_exposed@L01-IP1:22", "type": "ssh_exposed", "asset_id": "L01-IP1", "port": 22, "status": "open", "priority": "medium", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Confirm SSH must be public; allow key-based authentication only and restrict source IPs or use a VPN." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: SSH remote administration reachable from the internet [L01-IP1:22] (medium). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-02", "organization": "Lab Logistics 02 SRL (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L02-IP1", "type": "ip", "value": "203.0.113.12" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "high", "findings": [ { "key": "rdp_exposed@L02-IP1:3389", "type": "rdp_exposed", "asset_id": "L02-IP1", "port": 3389, "status": "open", "priority": "high", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Close TCP/3389 to the internet; allow remote desktop only through a VPN or gateway with MFA, and review authentication logs." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: Remote desktop (RDP) reachable from the internet [L02-IP1:3389] (high). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-03", "organization": "Lab Freight 03 NV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L03-IP1", "type": "ip", "value": "198.51.100.13" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 1 }, "overall_priority_open": "high", "findings": [ { "key": "database_exposed@L03-IP1:5432", "type": "database_exposed", "asset_id": "L03-IP1", "port": 5432, "status": "open", "priority": "high", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Restrict the database to private networks or specific application IPs; verify authentication, TLS and firewall rules from the owner side." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: Database service reachable from the internet [L03-IP1:5432] (high). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-04", "organization": "Lab Haulage 04 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L04-IP1", "type": "ip", "value": "198.51.100.14" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L04-IP1:443", "asset_id": "L04-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-05", "organization": "Lab Transport 05 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L05-DOM", "type": "domain", "value": "lab05-transport.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "medium", "findings": [ { "key": "spf_missing@L05-DOM", "type": "spf_missing", "asset_id": "L05-DOM", "port": null, "status": "open", "priority": "medium", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Publish an SPF record listing all legitimate senders and ending in -all or ~all." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: No SPF e-mail sender record [L05-DOM] (medium). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-06", "organization": "Lab Logistics 06 SRL (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L06-DOM", "type": "domain", "value": "lab06-logistics.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "low", "findings": [ { "key": "dmarc_monitoring_only@L06-DOM", "type": "dmarc_monitoring_only", "asset_id": "L06-DOM", "port": null, "status": "open", "priority": "low", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "After reviewing DMARC reports, move from p=none to p=quarantine and then p=reject." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: DMARC policy only monitors (p=none) [L06-DOM] (low). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-07", "organization": "Lab Freight 07 NV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L07-IP1", "type": "ip", "value": "192.0.2.17" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "medium", "findings": [ { "key": "tls_certificate_expired@L07-IP1:443", "type": "tls_certificate_expired", "asset_id": "L07-IP1", "port": 443, "status": "open", "priority": "medium", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Renew the certificate now and automate renewal with expiry alerts.", "not_after": "2026-10-15" } ], "informational": [ { "key": "public_web_service@L07-IP1:443", "asset_id": "L07-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: TLS certificate expired [L07-IP1:443] (medium). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-08", "organization": "Lab Haulage 08 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L08-IP1", "type": "ip", "value": "192.0.2.18" }, { "asset_id": "L08-DOM", "type": "domain", "value": "lab08-haulage.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L08-IP1:443", "asset_id": "L08-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-09", "organization": "Lab Transport 09 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L09-IP1", "type": "ip", "value": "203.0.113.19" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "low", "findings": [ { "key": "unverified_cve_association@L09-IP1:443", "type": "unverified_cve_association", "asset_id": "L09-IP1", "port": 443, "status": "open", "priority": "low", "confidence": "low", "claim_level": "unverified_cve_association", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Check the installed package version against the vendor advisory before drawing conclusions; patch if affected.", "cve_ids": [ "CVE-2099-2001" ], "cve_note": "Associated by the data source; not proof of vulnerability or exploitability." } ], "informational": [ { "key": "public_web_service@L09-IP1:443", "asset_id": "L09-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: Software version associated with a CVE (unverified) [L09-IP1:443] (low). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-10", "organization": "Lab Logistics 10 SRL (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L10-IP1", "type": "ip", "value": "203.0.113.20" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "medium", "findings": [ { "key": "ssh_exposed@L10-IP1:22", "type": "ssh_exposed", "asset_id": "L10-IP1", "port": 22, "status": "open", "priority": "medium", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Confirm SSH must be public; allow key-based authentication only and restrict source IPs or use a VPN." } ], "informational": [], "manual_review": [], "suppressed": [ { "key": "unverified_cve_association@L10-IP1:22", "reason": "Owner-provided package inventory shows the fix is backported for every reported CVE; the banner version alone is not evidence." } ], "warnings": [], "changes": [], "customer_summary": "Needs attention: SSH remote administration reachable from the internet [L10-IP1:22] (medium). Downgraded after stronger evidence: 1 indicator(s). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-11", "organization": "Lab Freight 11 NV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L11-IP1", "type": "ip", "value": "198.51.100.21" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "medium", "findings": [ { "key": "unsupported_software@L11-IP1:443", "type": "unsupported_software", "asset_id": "L11-IP1", "port": 443, "status": "open", "priority": "medium", "confidence": "medium", "claim_level": "lifecycle_concern", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Plan an upgrade to a vendor-supported version; limit exposure until then.", "end_of_support": "2025-06-30" } ], "informational": [ { "key": "public_web_service@L11-IP1:443", "asset_id": "L11-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs attention: Software beyond vendor support [L11-IP1:443] (medium). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-12", "organization": "Lab Haulage 12 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L12-IP1", "type": "ip", "value": "198.51.100.22" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L12-IP1:8443", "asset_id": "L12-IP1", "port": 8443 } ], "manual_review": [ { "key": "conflicting_product_identification@L12-IP1:8443", "reason": "Sources disagree on the product on this port; product-based conclusions (CVE, lifecycle) are withheld." } ], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "Needs manual review: 1 item(s) with insufficient or conflicting evidence. No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-13", "organization": "Lab Transport 13 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L13-IP1", "type": "ip", "value": "192.0.2.23" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L13-IP1:443", "asset_id": "L13-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [ { "key": "stale_observation_superseded@L13-IP1", "reason": "An observation older than 90 days conflicts with newer evidence and is not treated as current." } ], "changes": [], "customer_summary": "No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-14", "organization": "Lab Logistics 14 SRL (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": null, "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [], "blocked_assets": [ { "asset_id": "L14-IP1", "reason": "not_in_trusted_inventory" } ], "ownership_status": "ownership_unverified", "claims_rejected": 1, "blocked_observations": 2, "rejected_observations": 0 }, "overall_priority_open": "none", "findings": [], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "No assessment was performed: none of the supplied assets is covered by a verified authorization. Ownership is unverified and no contact is authorized.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-15", "organization": "Lab Freight 15 NV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L15-IP1", "type": "ip", "value": "198.51.100.25" } ], "blocked_assets": [ { "asset_id": "L15-IP2", "reason": "not_in_trusted_inventory" } ], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 1, "blocked_observations": 1, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L15-IP1:443", "asset_id": "L15-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [], "customer_summary": "No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-16", "organization": "Lab Haulage 16 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L16-IP1", "type": "ip", "value": "192.0.2.26" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "informational", "findings": [], "informational": [ { "key": "public_web_service@L16-IP1:443", "asset_id": "L16-IP1", "port": 443 } ], "manual_review": [], "suppressed": [ { "key": "legacy_tls_protocol@L16-IP1:443", "reason": "A low-reliability alert is contradicted by newer, higher-reliability evidence showing only modern TLS versions." } ], "warnings": [], "changes": [], "customer_summary": "Downgraded after stronger evidence: 1 indicator(s). No security findings for the authorized assets. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-17", "organization": "Lab Transport 17 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L17-IP1", "type": "ip", "value": "203.0.113.27" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "high", "findings": [ { "key": "rdp_exposed@L17-IP1:3389", "type": "rdp_exposed", "asset_id": "L17-IP1", "port": 3389, "status": "open", "priority": "high", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Close TCP/3389 to the internet; allow remote desktop only through a VPN or gateway with MFA, and review authentication logs." } ], "informational": [ { "key": "public_web_service@L17-IP1:443", "asset_id": "L17-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [ { "key": "public_web_service@L17-IP1:443", "item_class": "informational", "change": "unchanged", "transition": "S1->S2", "alert": false }, { "key": "rdp_exposed@L17-IP1:3389", "item_class": "finding", "change": "new", "transition": "S1->S2", "alert": true } ], "customer_summary": "Needs attention: Remote desktop (RDP) reachable from the internet [L17-IP1:3389] (high, new). Unchanged: Public web service [L17-IP1:443]. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-18", "organization": "Lab Logistics 18 SRL (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L18-DOM", "type": "domain", "value": "lab18-logistics.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "none", "findings": [ { "key": "spf_missing@L18-DOM", "type": "spf_missing", "asset_id": "L18-DOM", "port": null, "status": "resolved", "priority": "medium", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Publish an SPF record listing all legitimate senders and ending in -all or ~all." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [ { "key": "spf_missing@L18-DOM", "item_class": "finding", "change": "resolved", "transition": "S1->S2", "alert": false } ], "customer_summary": "Resolved: No SPF e-mail sender record [L18-DOM]. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-19", "organization": "Lab Freight 19 NV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L19-DOM", "type": "domain", "value": "lab19-freight.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "low", "findings": [ { "key": "dmarc_monitoring_only@L19-DOM", "type": "dmarc_monitoring_only", "asset_id": "L19-DOM", "port": null, "status": "reopened", "priority": "low", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "After reviewing DMARC reports, move from p=none to p=quarantine and then p=reject." } ], "informational": [], "manual_review": [], "suppressed": [], "warnings": [], "changes": [ { "key": "dmarc_monitoring_only@L19-DOM", "item_class": "finding", "change": "resolved", "transition": "S1->S2", "alert": false }, { "key": "dmarc_monitoring_only@L19-DOM", "item_class": "finding", "change": "recurred", "transition": "S2->S3", "alert": true } ], "customer_summary": "Needs attention: DMARC policy only monitors (p=none) [L19-DOM] (low, returned after remediation). Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } }, { "report_type": "cybersentinel_lab_assessment", "report_schema_version": "L1.0", "data_mode": "synthetic", "scenario_id": "LAB-20", "organization": "Lab Transport 20 BV (fictional)", "reference_time": "2026-11-08T00:00:00Z", "evaluated_as_of": "2026-11-08T00:00:00.000Z", "schema_valid": true, "schema_errors": [], "scope": { "authorized_assets": [ { "asset_id": "L20-IP1", "type": "ip", "value": "192.0.2.30" }, { "asset_id": "L20-DOM", "type": "domain", "value": "lab20-transport.example" } ], "blocked_assets": [], "ownership_status": "verified_by_trusted_inventory", "claims_rejected": 0, "blocked_observations": 0, "rejected_observations": 0 }, "overall_priority_open": "high", "findings": [ { "key": "dmarc_monitoring_only@L20-DOM", "type": "dmarc_monitoring_only", "asset_id": "L20-DOM", "port": null, "status": "resolved", "priority": "low", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "After reviewing DMARC reports, move from p=none to p=quarantine and then p=reject." }, { "key": "rdp_exposed@L20-IP1:3389", "type": "rdp_exposed", "asset_id": "L20-IP1", "port": 3389, "status": "open", "priority": "high", "confidence": "medium", "claim_level": "exposure_observation", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Close TCP/3389 to the internet; allow remote desktop only through a VPN or gateway with MFA, and review authentication logs." }, { "key": "tls_certificate_expired@L20-IP1:443", "type": "tls_certificate_expired", "asset_id": "L20-IP1", "port": 443, "status": "open", "priority": "medium", "confidence": "high", "claim_level": "configuration_finding", "verification_status": "not_actively_verified", "confirmed_vulnerability": false, "recommendation": "Renew the certificate now and automate renewal with expiry alerts.", "not_after": "2026-10-20" } ], "informational": [ { "key": "public_web_service@L20-IP1:443", "asset_id": "L20-IP1", "port": 443 } ], "manual_review": [], "suppressed": [], "warnings": [], "changes": [ { "key": "dmarc_monitoring_only@L20-DOM", "item_class": "finding", "change": "resolved", "transition": "S1->S2", "alert": false }, { "key": "public_web_service@L20-IP1:443", "item_class": "informational", "change": "unchanged", "transition": "S1->S2", "alert": false }, { "key": "rdp_exposed@L20-IP1:3389", "item_class": "finding", "change": "new", "transition": "S1->S2", "alert": true }, { "key": "tls_certificate_expired@L20-IP1:443", "item_class": "finding", "change": "new", "transition": "S1->S2", "alert": true } ], "customer_summary": "Needs attention: Remote desktop (RDP) reachable from the internet [L20-IP1:3389] (high, new); TLS certificate expired [L20-IP1:443] (medium, new). Resolved: DMARC policy only monitors (p=none) [L20-DOM]. Unchanged: Public web service [L20-IP1:443]. Based on passive and owner-provided evidence only; no log-in, exploitation or active testing was performed.", "claims": { "confirmed_vulnerabilities": 0, "exploitation_performed": false, "authentication_attempted": false, "active_testing_performed": false }, "outreach": { "generated": false, "commercial_content": false } } ]