Sample posture report
An illustrative example with invented details, not client data. Every finding has a plain-English risk and a concrete fix.
| Priority | Finding | Where | Fix |
|---|---|---|---|
| High | Storage bucket readable by anyone on the internet | bucket-name-redacted | Enable public access prevention (included as code) |
| High | Administrator accounts without multi-factor authentication | 3 accounts | Enforce MFA and remove unused admins |
| Medium | Service account key older than 90 days | svc-account-redacted | Replace with workload identity and block new keys |
| Medium | Firewall rule allows SSH from anywhere | rule-name-redacted | Restrict to a bastion or identity-aware proxy |
| Low | Idle virtual machines costing money | 4 instances | Stop or right-size; estimated saving shown in the report |