SIGHTLINE
EXAMPLE
/report · finding 07/37
tech & security
{
"data": {
"finding": {
"severity": "medium",
"category": "tech",
"surface": "/checkout",
"detail": "Session cookie set without Secure and HttpOnly flags",
"evidence": {
"strings": [
"Set-Cookie: sid=a1b2c3d4; Path=/"
]
},
"fix": "Add Secure; HttpOnly; SameSite=Lax to the session cookie"
}
},
"meta": {
"lens": "tech_security",
"engagement": "invited",
"confidence": 0.97,
"scanned_surfaces": 24
},
"provenance": {
"method": "passive scan, response headers only, no exploit, no auth bypass",
"disclosure": "shared in good faith with the site owner"
}
}
An illustrative finding, not one from your site: this is the shape every Sightline finding arrives in, the envelope the whole company ships, data, meta, and the provenance behind it.