Reports

The diagnostic report

The diagnostic report is included with every scan. It is built from an immutable snapshot of the result you were looking at, so the PDF matches the screen even if the domain changes afterwards.

• A plain-language summary with the overall posture and the coverage statement.
• The observed target and the time of the scan.
• Each finding with its status, severity where one applies, and the evidence behind it.
• The checks that could not be completed, listed as UNKNOWN with the reason, so gaps are visible rather than hidden.
• The limits of the test, stated in the document.

The detailed remediation report

The remediation report adds specific, ordered steps for the findings that need attention. It is available per the current offer; the offer in force is shown when you request it. For each finding it sets out:

• The change to make, written for the evidence found on your domain.
• Prerequisites to confirm before changing anything.
• Operational risks of the change, such as mail that could be rejected if a policy is tightened too quickly.
• A rollback, so you can return to the previous state.
• How to verify the change afterwards, including which tool to re-run.

Delivery by email only

PDF reports are never served as direct downloads from a scan page. They reach you only by email, after the address has been verified. This keeps reports from being generated for, or sent to, addresses nobody confirmed.

1. Choose the report action on a result and enter your email address.
2. A verification message is sent. Follow its link to confirm the address.
3. The report is generated from the saved snapshot and queued for delivery.
4. The PDF is sent to the verified address. If delivery fails, it is retried and the failure is recorded.

What happens to your email address

The address is used first to verify you and deliver the report you requested. That is transactional email, and it does not depend on marketing consent.

Product updates or offers are sent only if you tick a separate, unticked-by-default consent box, and you can withdraw that consent at any time. Declining has no effect on your report. Details of what is stored, for how long and how to ask for deletion are in the privacy policy.

Analytics events about report requests do not include your email address or report content.

Expiry and re-delivery

Verification links and any report retrieval links are time limited and expire. If one has expired, request the report again from a fresh scan. Because a report reflects the moment its snapshot was taken, an old report is not a statement about the domain today.

What a report is not

A report is a record of automated external checks. It is not a penetration test, a compliance certificate or a guarantee of email delivery. It inherits the limits of the scan, which are described on the domain assessment page.

Detailed remediation reports right now

During the launch period detailed remediation reports are included without charge. Nothing is billed.

Run a domain assessment or choose a tool, then use Get report by email on the result.

Written by DNS Tools editorial · Last updated 2026-10-09