Three pages of a TCSR PDF report: the cover, the findings page with severity and details, and the evidence page with command output

TCSR

Security Assessment Report

Domain: example.com
Date: 27 Oct 2026
Assessment type: Audit — full active
Reference: TCSR-2026-1027-K7Q2M9XD

TCSR
Talivio Technology OÜ

TCSRSecurity Assessment Report
example.com

Findings

SeverityFindingDetails

Critical Exposed: /.env The file /.env is publicly accessible and contains environment variables.

High Missing HSTS The site does not enforce HTTP Strict Transport Security (HSTS).

Medium Missing CSP No Content-Security-Policy header in responses.

Low DMARC p=none DMARC only monitors; spoofed mail is not blocked.

2

TCSRSecurity Assessment Report
example.com

Evidence

Exposed: /.env (Critical)

$ curl https://example.com/.env
APP_NAME=Laravel
APP_ENV=production
APP_KEY=base64:K0In7•••••••••
DB_DATABASE=app
DB_PASSWORD=••••••••

Missing HSTS (High)

$ curl -I https://example.com
HTTP/2 200 OK
content-type: text/html
# no strict-transport-security header

Missing CSP (Medium)

$ curl -I https://example.com
HTTP/2 200 OK
# no content-security-policy header

3

Illustration · sample data

Open the verification page

PDF · Real findings · SHA-256

Every TCSR report carries a unique reference and a SHA-256 fingerprint. Recipients paste the reference at our public verification page and upload the PDF — the hash is checked entirely in their browser. No tampering goes unnoticed.

AI-authored narrative: Findings become a clear executive summary, risk view, and prioritized roadmap — in your language.

TCSR / Trust badge

A public badge for your site.

After each assessment, embed a self-updating security-grade badge that links to a public status page — visitors can verify it themselves.

The HTML snippet that embeds the TCSR badge: a link to the public status page around the badge image

Embed code (paste in your footer)

Public TCSR status page for example.com with grade B, the last scan time and four findings with their severity

TCSR Security status

example.com

Last assessed 28 Oct 2026, 03:12 UTC

B Good security posture

Exposed: /.env Critical
Missing HSTS High
Missing CSP Medium
DMARC p=none Low

Illustration · sample data

TCSR / Get started

Scan your domain free.

Get a clear picture of your security posture in minutes.

Scan your domain

Evidence you can hand over.

A public badge for your site.

Scan your domain free.