nergi.io
Anergi Diagnostic Engine // Free Point-In-Time Evaluation

Could Your Business Use a Mini S.P.A.?

Experience a pain-free, non-intrusive 60-second Security Posture Assessment (S.P.A.). We examine the digital perimeter of your business—diagnosing exposed endpoints, cryptographic TLS alignment, and boundary health.

Place business name or domain to start treatment diagnosis:
A
A
A
A
A
A
Zero Invasive Probes • 60-Sec Real-Time Analysis • Instant PDF Deliverable
Live Telemetry Attested Timestamp: 2026-09-21 19:20:00 UTC

Security Posture Assessment Report

Evaluated Domain: anergi.io • Protocol: Mini S.P.A. Surface Diagnostic

The Eyes (Perimeter)
95%
No Exposed Subnets
The Arteries (TLS)
TLS 1.3
PFS Cipher Suite
The Bones (HSTS)
Enforced
31536000s Preload
Overall Rating
GRADE A
Low Attack Surface

Detailed Clinical Vector Telemetry & Anatomical Analysis

Comprehensive breakdown of tested physiological vectors, exposure severity, and therapeutic requirements.

👁️

Anatomical Sector: The Eyes // External Perimeter & DNS Hygiene

OPTIMAL VITALITY

Clinical Diagnostic Context: The "Eyes" represent your external-facing edge surfaces—DNS boundary configurations, authoritative name-servers, public mail records (SPF/DKIM/DMARC), and perimeter IP allocations. Unmonitored edge assets represent the most frequent entrypoint for reconnaissance probes and automated exploitation bots.

DNSSEC Boundary Attestation: Valid & Synchronized
Dangling CNAME / Takeover Exposure: Zero Rogue Targets
Public MX / DMARC Reject Policy: p=reject configured
Strategic DNS Hardening & Zone Diff Directives
🩸

Anatomical Sector: The Arteries // Transport Encryption & Downgrade Protection

HARDENED CIPHERS

Clinical Diagnostic Context: The "Arteries" govern the confidential transit of customer data, session tokens, and business intelligence. Failure to enforce Perfect Forward Secrecy (PFS) or allowing legacy TLS 1.0/1.1 protocols leaves network pipelines vulnerable to adversarial eavesdropping, POODLE, and BEAST downgrade attacks.

Negotiated Protocol: TLS 1.3 (RFC 8446)
Strict-Transport-Security (HSTS): max-age=31536000; includeSubDomains; preload
Cipher Handshake Suite: TLS_AES_128_GCM_SHA256 (256-bit PFS)
PFS Cipher Configuration & Downgrade Directives
🦴

Anatomical Sector: The Bones // Frame Protection & Structural Headers

ELEVATED ATTENTION

Clinical Diagnostic Context: The "Bones" form the architectural skeleton of browser rendering security. Missing modern framing constraints (such as Content-Security-Policy `frame-ancestors`) exposes user interfaces to transparent iframe clickjacking, cross-site scripting (XSS), and credential harvesting overlays.

X-Frame-Options Directive: DENY / SAMEORIGIN Active
X-Content-Type-Options: nosniff Enforced
CSP 'frame-ancestors' Alignment: Partial Baseline Detected
Step-by-Step Server Hardening Directives (Apache / Nginx / CSP)
🧠

Anatomical Sector: The Brains // AI Governance & Regulatory Attestation

AUDIT READY

Clinical Diagnostic Context: The "Brains" encompass cognitive architectures, LLM runtime interfaces, and automated decision pipelines. Under evolving global regulations (ISO 42001, NIST AI RMF, and the EU AI Act), organizations must maintain audit trails verifying that model inputs/outputs are isolated from prompt injection and sensitive enterprise data leakage.

ISO 42001 AI Management Readiness: Framework Aligned
EU AI Act Risk Classification: Category II (General Enterprise)
Prompt Boundary Enforcement: Isolated Reverse-Proxy Gateway
ISO 42001 & AI Risk Governance Evidence Pack
ASSESSMENT DISCLAIMER: This report represents point-in-time surface posture metrics. Full internal network segmentation, privilege audits, and SOC 2 Type II audit readiness require internal subnet scanning and controlled adversary emulation.
Anergi Automated SecOps Engine
Authorized Lead Attestation • anergi.io
Next Therapeutic Step

Advance from Initial Vital Signs to Full Anatomical Penetration Testing

Explore our 4 clinical stages: Bones, Brains, Arteries, and Eyes with guaranteed 3-Hour incident containment SLA.