{
  "_sample": {
    "sample": true,
    "note": "SAMPLE: one real run of security-scan-lite ($0.02) against lordevo.com, which Lordevo owns, made 2026-10-30T12:52:59.236Z from the development copy (normal shop User-Agent, passive checks only, no payment). Point-in-time.",
    "target": "https://lordevo.com/",
    "made_at": "2026-10-30T12:52:59.236Z",
    "duration_ms": 1076
  },
  "tool": "security-scan-lite",
  "tier": "lite",
  "url": "https://lordevo.com/",
  "domain": "lordevo.com",
  "checked_at": "2026-10-30T12:53:00.312Z",
  "grade": "A",
  "score": 90,
  "passive_only": true,
  "summary": {
    "https": true,
    "tls": {
      "protocol": "TLSv1.3",
      "valid": true,
      "issuer": "Let's Encrypt",
      "subject": "lordevo.com",
      "valid_to": "2027-01-20T09:59:40.000Z",
      "days_left": 81
    },
    "http_to_https": "301 -> https://lordevo.com/",
    "web_grade": "A+",
    "email_grade": "A",
    "spoofable": false,
    "caa": [],
    "ipv6": true,
    "security_txt": false
  },
  "counts": {
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 5
  },
  "top_findings": [
    {
      "area": "email",
      "severity": "low",
      "id": "dmarc_no_rua",
      "title": "DMARC has no rua= report address.",
      "fix": "Add rua=mailto:<address> to receive aggregate reports."
    },
    {
      "area": "email",
      "severity": "low",
      "id": "no_mta_sts",
      "title": "No MTA-STS.",
      "fix": "Optional hardening: publish MTA-STS to enforce TLS for inbound mail."
    },
    {
      "area": "email",
      "severity": "low",
      "id": "no_tls_rpt",
      "title": "No TLS-RPT.",
      "fix": "Optional: publish _smtp._tls TXT \"v=TLSRPTv1; rua=mailto:...\""
    },
    {
      "area": "dns",
      "severity": "low",
      "id": "no_caa",
      "title": "No CAA record: any certificate authority may issue certificates for this domain.",
      "fix": "Publish CAA, e.g. lordevo.com. CAA 0 issue \"letsencrypt.org\" (list the CAs you use)."
    },
    {
      "area": "web",
      "severity": "low",
      "id": "no_security_txt",
      "title": "No /.well-known/security.txt.",
      "fix": "Publish security.txt (RFC 9116) with a Contact: and Expires: line so researchers can report issues."
    }
  ],
  "headers": {
    "strict-transport-security": "max-age=15552000",
    "content-security-policy": "default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self' 'sha256-mrJ7xB7cbF2V62o0CMyWGr8yVpQTgkvRAUTYRusmRsM='; form-action 'self' https://seo.lordevo.com https://checkout.stripe.com; frame-ancestors 'none'; base-uri 'none'; object-src 'none'",
    "x-content-type-options": "nosniff",
    "referrer-policy": "strict-origin-when-cross-origin",
    "permissions-policy": "camera=(), microphone=(), geolocation=(), interest-cohort=()",
    "cross-origin-opener-policy": null,
    "cross-origin-resource-policy": null,
    "content-security-policy-report-only": null,
    "x-frame-options": "DENY",
    "server": "cloudflare",
    "x-powered-by": null,
    "x-aspnet-version": null,
    "x-generator": null
  },
  "cookies": [],
  "email": {
    "mail_provider": [
      "Namecheap Private Email"
    ],
    "spf": "v=spf1 include:spf.privateemail.com ~all",
    "dmarc": "quarantine",
    "dkim_selectors": [
      "default"
    ]
  },
  "upsell": [
    {
      "product": "Website Security Check: Safe (passive, full)",
      "price_usd": 1,
      "method": "POST",
      "endpoint": "https://shop.lordevo.com/api/svc/website-security-scan/safe",
      "what_you_get": "Lordevo Security passive scan: certificate chain, cookies, well-known exposed paths, advertised software versions, full DNS and email checks, rated findings and a private HTML report."
    },
    {
      "product": "Website Security Check: Deep (active)",
      "price_usd": 5,
      "method": "POST",
      "endpoint": "https://shop.lordevo.com/api/svc/website-security-scan/deep",
      "what_you_get": "Multi-phase active scan (OWASP mapping, JS secrets, CORS, subdomains). Needs free ownership verification first."
    }
  ],
  "note": "LITE: passive summary from 3-4 plain GET requests and public DNS. Nothing intrusive is sent.",
  "provider": "Lordevo (shop.lordevo.com)",
  "price_usd": 0.02
}