You've run a scan and you're looking at findings, grades, and categories. What does it mean — and what should you actually do?
Start with the overall grade
The grade (A–F on threatprobe.app) is a quick summary weighted by severity. It gives you an immediate sense of where you stand, but the real value is in the individual findings underneath it.
- A/B — basics are covered, minor gaps remain
- C/D — meaningful gaps that should be addressed
- F — at least one serious issue needing immediate attention
Understand severity levels
- Critical — actively exploitable, likely to result in a breach if not fixed immediately
- High — serious risk, address as soon as possible
- Medium — real risk, lower likelihood of immediate exploitation — schedule a fix
- Low / Informational — best practices not implemented, lower urgency
Work through critical and high findings first.
What each category means
Headers — settings your server sends to browsers. Missing headers don't break anything today but remove protections browsers would otherwise apply.
TLS — your HTTPS configuration. Outdated protocols or weak cipher suites can allow traffic to be decrypted.
DNS/Email — missing SPF, DKIM, or DMARC means your domain can be spoofed.
Exposed files — if .env or .git appear here, act immediately. These are your most urgent findings regardless of how the rest of the report looks.
Ports — unexpected open ports may indicate services never intended to be internet-facing.
Reputation — a blocklist finding needs investigation and root-cause resolution before requesting removal.
Don't panic at a long list
A long list of low-severity findings is less concerning than a single critical one. Read severity levels carefully and prioritise accordingly.
The Basic and Full reports include an AI remediation plan — a prioritised fix list in plain language, with specific steps for each finding.