TGG / SECURITY BASELINE
A first look at your
website's security.
Understand your public-facing configuration, see the evidence, and know what to review next.
DEFINED SCOPE
HTTPS certificate validation and selected response policies for one verified hostname.
Application logic and authenticated areas need a separately scoped assessment.
CHECKING AVAILABILITY
Start with your domain.
Sign in with a verified email address, then prove control of the hostname.
Add a temporary DNS record
Publish this TXT record with your DNS provider. Verification is valid for one hour and authorizes one check.
YOUR CHECK
Check queued
Your baseline report
Outside this check
SEE THE FORMAT
Evidence you can work with.
Our fictional sample shows observations, review items, and coverage limits. It contains no findings about a real website.
A configuration baseline does not establish that an application is secure or replace a penetration test. No exploit tests or authenticated pages are included.