Example Engineering Ltd
- Domains in scope
- example.com, example.net, example.org
- Period
- 1 September to 6 October 2026
- Prepared on
- 6 October 2026
- Scans in this period
- 1 September 2026, 15 September 2026, 29 September 2026, 6 October 2026
Findings5
Fixed and confirmed3
Open, with an owner and date2
- Act nowEP-001 · ACT_NOW
legacy-mail.example.com still pointed to a server that was retired. Anyone who took over that address could have received the company's mail.
Action: Remove the legacy-mail record.
- Found
- 29 Sep 2026
- Owner
- Mail administrator
- Due
- 29 Sep 2026
- Approved by
- Head of IT
- Fixed by
- Mail administrator, 29 Sep 2026
- Confirmed
- By the scan of 6 Oct 2026
- Next business dayEP-002 · NEXT_BUSINESS_DAY
billing.example.com had DMARC set to 'none', so mail pretending to be the billing team was not blocked.
Action: Move the DMARC policy to 'quarantine'.
- Found
- 29 Sep 2026
- Owner
- Finance systems lead
- Due
- 30 Sep 2026
- Approved by
- Head of IT
- Fixed by
- Finance systems lead, 30 Sep 2026
- Confirmed
- By the scan of 6 Oct 2026
- Next business dayEP-003 · NEXT_BUSINESS_DAY
The certificate on portal.example.com expires in 9 days.
Action: Renew the certificate.
- Found
- 6 Oct 2026
- Owner
- Web platform team
- Due
- 7 Oct 2026
- Status
- Open
- Next reviewEP-004 · NEXT_REVIEW
example.net has no CAA record, so any certificate authority may issue certificates for it.
Action: Add a CAA record naming the authority in use.
- Found
- 15 Sep 2026
- Owner
- Network team
- Due
- 13 Oct 2026
- Approved by
- Head of IT
- Fixed by
- Network team, 22 Sep 2026
- Confirmed
- By the scan of 29 Sep 2026
- Next reviewEP-005 · NEXT_REVIEW
example.org is registered but serves no site or mail, and has no SPF record saying it sends none.
Action: Publish an SPF record that allows no senders ('v=spf1 -all').
- Found
- 1 Sep 2026
- Owner
- Network team
- Due
- 13 Oct 2026
- Status
- Open