-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathfake_data.html
More file actions
76 lines (76 loc) · 5.33 KB
/
Copy pathfake_data.html
File metadata and controls
76 lines (76 loc) · 5.33 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Q1 2026 Security Assessment Report</title>
<style>
body { font-family: 'Segoe UI', sans-serif; margin: 0; padding: 20px; background: #f4f6f9; color: #333; }
.container { max-width: 960px; margin: 0 auto; background: #fff; border-radius: 8px; box-shadow: 0 2px 8px rgba(0,0,0,0.1); padding: 40px; }
h1 { color: #1a3a5c; border-bottom: 3px solid #2e86de; padding-bottom: 10px; }
h2 { color: #2e86de; margin-top: 30px; }
table { width: 100%; border-collapse: collapse; margin: 15px 0; }
th { background: #2e86de; color: #fff; padding: 10px 12px; text-align: left; }
td { padding: 9px 12px; border-bottom: 1px solid #e0e0e0; }
tr:hover { background: #f0f6ff; }
.badge { display: inline-block; padding: 3px 10px; border-radius: 12px; font-size: 0.85em; font-weight: 600; }
.critical { background: #fee2e2; color: #b91c1c; }
.high { background: #ffedd5; color: #c2410c; }
.medium { background: #fef9c3; color: #a16207; }
.low { background: #dcfce7; color: #166534; }
.summary-cards { display: grid; grid-template-columns: repeat(4, 1fr); gap: 15px; margin: 20px 0; }
.card { padding: 20px; border-radius: 8px; text-align: center; }
.card h3 { margin: 0; font-size: 2em; }
.card p { margin: 5px 0 0; font-size: 0.9em; opacity: 0.8; }
.card-critical { background: #fef2f2; border-left: 4px solid #b91c1c; }
.card-high { background: #fff7ed; border-left: 4px solid #c2410c; }
.card-medium { background: #fefce8; border-left: 4px solid #a16207; }
.card-low { background: #f0fdf4; border-left: 4px solid #166534; }
.footer { margin-top: 40px; padding-top: 15px; border-top: 1px solid #ddd; font-size: 0.85em; color: #888; text-align: center; }
</style>
</head>
<body>
<div class="container">
<h1>Q1 2026 Security Assessment Report</h1>
<p><strong>Prepared by:</strong> Fake Security Team | <strong>Date:</strong> April 24, 2026 | <strong>Classification:</strong> Internal</p>
<h2>Executive Summary</h2>
<div class="summary-cards">
<div class="card card-critical"><h3>4</h3><p>Critical</p></div>
<div class="card card-high"><h3>12</h3><p>High</p></div>
<div class="card card-medium"><h3>27</h3><p>Medium</p></div>
<div class="card card-low"><h3>53</h3><p>Low</p></div>
</div>
<h2>Top Findings</h2>
<table>
<tr><th>#</th><th>Finding</th><th>Severity</th><th>Component</th><th>Status</th></tr>
<tr><td>1</td><td>SQL Injection in /api/v2/users endpoint</td><td><span class="badge critical">Critical</span></td><td>Auth Service</td><td>Remediated</td></tr>
<tr><td>2</td><td>Hardcoded API key in config.prod.yaml</td><td><span class="badge critical">Critical</span></td><td>Payment Gateway</td><td>In Progress</td></tr>
<tr><td>3</td><td>Missing CSRF tokens on admin dashboard</td><td><span class="badge critical">Critical</span></td><td>Web Portal</td><td>Open</td></tr>
<tr><td>4</td><td>Unauthenticated access to /debug endpoint</td><td><span class="badge critical">Critical</span></td><td>API Gateway</td><td>Remediated</td></tr>
<tr><td>5</td><td>Outdated OpenSSL (v1.0.2) in container image</td><td><span class="badge high">High</span></td><td>Base Image</td><td>In Progress</td></tr>
<tr><td>6</td><td>Excessive IAM permissions on Lambda role</td><td><span class="badge high">High</span></td><td>Cloud Infra</td><td>Open</td></tr>
<tr><td>7</td><td>Insecure deserialization in message queue</td><td><span class="badge high">High</span></td><td>Event Bus</td><td>In Progress</td></tr>
<tr><td>8</td><td>TLS 1.0 still enabled on load balancer</td><td><span class="badge medium">Medium</span></td><td>Network</td><td>Remediated</td></tr>
<tr><td>9</td><td>Verbose error messages leak stack traces</td><td><span class="badge medium">Medium</span></td><td>API Gateway</td><td>Open</td></tr>
<tr><td>10</td><td>Missing rate limiting on login endpoint</td><td><span class="badge medium">Medium</span></td><td>Auth Service</td><td>In Progress</td></tr>
</table>
<h2>Team Remediation Performance</h2>
<table>
<tr><th>Team</th><th>Assigned</th><th>Remediated</th><th>Avg Days to Fix</th><th>SLA Compliance</th></tr>
<tr><td>Platform Engineering</td><td>28</td><td>22</td><td>4.2</td><td>92%</td></tr>
<tr><td>Identity & Access</td><td>19</td><td>16</td><td>3.8</td><td>95%</td></tr>
<tr><td>Cloud Infrastructure</td><td>15</td><td>9</td><td>7.1</td><td>73%</td></tr>
<tr><td>Frontend Team</td><td>22</td><td>18</td><td>5.5</td><td>84%</td></tr>
<tr><td>Data Services</td><td>12</td><td>11</td><td>2.9</td><td>98%</td></tr>
</table>
<h2>Recommendations</h2>
<ol>
<li>Immediately rotate the hardcoded API key in Payment Gateway</li>
<li>Implement CSRF protection across all admin interfaces within 7 days</li>
<li>Upgrade base container images to use OpenSSL 3.x</li>
<li>Conduct IAM permissions audit for all Lambda functions</li>
<li>Enable TLS 1.3 and disable TLS below 1.2 on all public-facing endpoints</li>
</ol>
<div class="footer">This report contains entirely fake data for demonstration purposes only.</div>
</div>
</body>
</html>