# subdomainshadowpulse report: demo-saas.example

> Demo report on a fictional sample site.

**Score:** 0/100 · Scanned 2026-10-26T21:45:54.086Z

6 of 6 checks need attention (1 high priority).

- [ ] **No certificates expiring in the next 30 days** (high): 3 hostnames have their latest certificate expiring within 30 days.
- [ ] **No lapsed hostnames to review** (medium): 18 hostnames had certificates that lapsed over 30 days ago (possibly retired; check DNS no longer points at old services).
- [ ] **New hostnames in the last 30 days reviewed** (low): 6 hostnames first appeared in the last 30 days.
- [ ] **Limited wildcard certificates** (medium): 9 wildcard certificate entries.
- [ ] **Certificates from 3 or fewer issuers** (low): Issuers: Let's Encrypt, Example CA, Other CA, Fourth CA.
- [ ] **Public hostname inventory under 200** (low): 240 unique hostnames in public certificates.

---
Passive and informational: uses only public Certificate Transparency logs (crt.sh); no requests are sent to your hosts and nothing is probed or port-scanned. Public reports show counts only; the hostname list is available only to verified domain owners or agencies attesting authorization. Findings are review items, not confirmed vulnerabilities.