Oksa Security — Attack Surface Management

Acme Corp · acmecorp.fi

Scan completed 2026-09-22 · 08:14 UTC · Duration 4 min 38 s

Active monitoring

62/100

Elevated Risk

Requires attention

Critical

High

Medium

Low

8 subdomains discovered1 open risky port1 potential takeover2 DNS warnings

Priority findings

1 critical

Redis database open to internet (port 6379)

db.acmecorp.fi · Discovered 4 days ago · No authentication required

Critical

SSH exposed to internet on admin server

admin.acmecorp.fi · Port 22 · OpenSSH 8.4 · External access unrestricted

High

TLS certificate expires in 11 days

api.acmecorp.fi · Expires 2026-10-03 · Customer-facing service

High

Potential subdomain takeover

cdn.acmecorp.fi · CNAME → unclaimed GitHub Pages endpoint

High

SPF record exists but DMARC p=none

acmecorp.fi · Email spoofing partially possible

Medium

HSTS header missing on public website

www.acmecorp.fi · Browsers not forced to HTTPS

Medium

X-Frame-Options missing — clickjacking risk

app.acmecorp.fi · All pages vulnerable

Medium

Server version disclosed in HTTP headers

api.acmecorp.fi · nginx/1.24.0 — minor information exposure

Low

Subdomains discovered

8 total

www.acmecorp.fi

185.62.14.11

Valid · 187 days

api.acmecorp.fi

185.62.14.12

Expires in 11 days

admin.acmecorp.fi

185.62.14.13

Valid · 219 days

db.acmecorp.fi

185.62.14.14

Valid · 94 days

cdn.acmecorp.fi

CNAME

Valid · 43 days

dev.acmecorp.fi

185.62.14.15

Valid · 56 days

mail.acmecorp.fi

185.62.14.20

Valid · 167 days

staging.acmecorp.fi

185.62.14.16

Valid · 82 days

DNS security

acmecorp.fi

SPF record

v=spf1 include:mailgun.org ~all

DMARC record

p=none — monitoring only, no reject

Warning

DKIM

Selector: mailgun · 2048-bit key

DNSSEC

Not enabled

Warning

CAA records

letsencrypt.org authorized

Open ports detected

db.acmecorp.fi:6379 · Redis

Critical

admin.acmecorp.fi:22 · SSH

High

See your own attack surface

This is a sample scan. Your real results may look different — and likely include findings you don't know about yet.