Reading your scan output
Open ports#
The first block lists TCP ports naabu found reachable from outside. Anything here is exposed to the internet right now. Compare it against what you intended to expose. Management interfaces, database ports and old admin panels are the usual surprises.
Service and version#
nmap fingerprints each open port and prints the service and its version. Version accuracy matters because CVE matching runs off it. A banner that reports an old minor release will pull in CVEs for that release.
Severity breakdown#
A count per severity level, so you can see the shape of the result before reading individual findings. A single critical outranks a long list of informational notes.
Top findings#
The free tier shows the top 3 findings in full, plus counts for the rest. Full Pro and Deep return the complete list with remediation notes. See Scan tiers.
What the findings come from#
- Exposures such as a reachable
.envor.gitdirectory. - Default logins on services that shipped with known credentials.
- Subdomain and service takeovers.
- TLS issues including weak configuration and certificate problems.
- KEV and critical or high CVEs matched against the services detected on your open ports.