HTML interactive + PDF export

Sample Security Report

Every scan produces a detailed, interactive HTML report with security score, findings by severity, exploit-availability intelligence, recommendations, and attack chain analysis.

Scan Your Website Free View Sample Below
Example Output

Example Report: demo-company.com

A representative report generated by the 276-scanner engine.

2mny.com/scans/demo/report
Sample Report

2MNY Security Report

demo-company.com · October 2026

42/100
Grade: D
Scale: A+ ≥ 95, A ≥ 80, B ≥ 65, C ≥ 50, D ≥ 35, E ≥ 20, F < 20
2
Critical
7
High
12
Medium
28
Low
34
Info
Exploit Availability Intelligence

2 of the critical findings map to entries in the CISA Known Exploited Vulnerabilities catalog with public ExploitDB entries — patch these first. Every CVE in the report is checked against KEV, 25,089 ExploitDB-mapped CVEs and 3,192 Metasploit-mapped CVEs, refreshed daily.

Top Findings

jQuery 1.12.4 — multiple known CVEs
CRITICALKEV

Outdated jQuery detected (CVE-2020-11022/11023). XSS prototype pollution — actively exploited in the wild.

Missing Content-Security-Policy header HIGH

No CSP defined — inline scripts unrestricted, widening XSS impact. OWASP A05: Security Misconfiguration.

TLS 1.0 still enabled MEDIUM

Legacy protocol accepted. Disable TLS 1.0/1.1 and enforce TLS 1.2+.

Remediation roadmap
Week 1 — patch KEV findings Week 2 — headers & TLS Week 3 — hardening Week 4 — verification re-scan

Executive Summary

Score gauge, grade, severity counts — readable by non-technical stakeholders.

Technical Detail

Every finding with CVE/CWE IDs, OWASP mapping, evidence, and step-by-step fixes.

Exploit Intelligence

KEV flags, ExploitDB & Metasploit references, EPSS-based prioritization.