Scan reports
Each machine scan produces a detailed security report. This page explains the report structure.
Report sections
A completed report contains:
- Header — machine name, scan date, report language, scan status
- Security health score — 0-100 score with trend vs. previous scan
- Posture strip — OS, lifecycle, firewall, updates, backup at a glance
- Prioritized risks — P0-P3 ranked issues with estimated fix time
- Summary — executive-level prose about the machine's security posture
- System audit — per-domain findings with remediation commands
- Services audit — per-service issues with copy-paste fixes
- Network exposure — listening ports, firewall rules, WAN probe results
- Hosted apps — container workloads (Docker, Kubernetes)
- Scan history — previous scans with score comparison
Report language
Reports are generated in the language configured for your organization (English, French, or Spanish). Change the language in your profile settings. The next scan will generate the report in the selected language.
Report status
| Status | Meaning |
|---|---|
| Scanning | Agent data received, analysis in progress |
| Complete | Report ready to view |
| Failed | Analysis failed (retry available) |
Rescanning
Once the agent is installed, scans run from the host without going back to the dashboard:
sudo ghostpsy scan --yes # one-off scan
sudo ghostpsy cron install # weekly schedule (default)
The agent reuses the long-lived token at /etc/ghostpsy/agent.conf. The previous report is preserved in the scan history.
The Rescan button on the report page is for re-installing the agent on a fresh host (it generates a new bootstrap install command). Use Rebind on a token row instead if the same host has been re-imaged and you only need to re-attach the existing credential.