Sample report
EXAMPLE – fictional data. "Maple Street Tax Service" and every name, PC and value below are invented to show the report format.
Outside domain check (example)
| Item | Observation | Why it matters |
|---|---|---|
| Email provider (from MX) | Google Workspace | Tells which admin settings apply. |
| SPF | DETECTED ~all (soft) | Mail from unlisted senders is only marked as suspicious. |
| DMARC | DETECTED policy p=none: monitoring only | Fake mail is not blocked; it is only reported. |
| DKIM | Cannot be confirmed from the browser (common selectors only) | Confirm in your mail admin console that DKIM signing is on. |
Windows check, PC "FRONTDESK-01" (example)
| Check | Result | What it means |
|---|---|---|
| W02 Full-disk encryption (BitLocker) | NOT DETECTED | Drive C: is encrypted, but has no key protector, so protection is off. Windows 11 often encrypts the drive automatically during setup but waits for a recovery key to be saved before protection turns on. Until then, someone who takes the PC could still read the disk. Fix: turn BitLocker protection on and save the recovery key somewhere other than this PC (printed copy in a locked drawer, or your Microsoft account). See the BitLocker guide. |
| W08 Every local account requires a password | NEEDS WRITTEN CONFIRMATION | Account "frontdesk" carries Windows' "password not required" flag. This flag is common on accounts created during Windows setup, and the account may still have a password. Please confirm the account has a password, then set the flag off. See the password guide. |
| W03 Antivirus active with recent signatures | DETECTED | Microsoft Defender real-time protection on, signatures 0 days old. |
| W16 Outdated SMBv1 file sharing turned off | DETECTED | The old SMBv1 file-sharing protocol is off. |
Before and after recheck (example)
| Check | First check (Oct 2026) | Recheck after fixes |
|---|---|---|
| W02 BitLocker | NOT DETECTED encrypted, no key protector | DETECTED protection on, recovery key stored off the PC |
| W08 Password required | NEEDS WRITTEN CONFIRMATION flag set on "frontdesk" | DETECTED flag cleared with net user frontdesk /passwordreq:yes |
EXAMPLE – fictional data. Microsoft 365 checks: coming later; Microsoft 365 items in a real WISP come from intake form answers and are marked as client statements. Describes settings detected at the time of the check. Not an audit, not a certification, not legal advice.
Result texts in the Windows table are loaded from /catalog.json, the same source used for the PDF report. The text shown above is a fallback if it cannot be loaded.