The scan found nothing
Sometimes that is real. Here is how to tell.
An empty findings list is either good news or a coverage problem, and the report tells you which.
- Check the outcome. PARTIAL_COVERAGE means steps did not run - that is not a clean result.
- Check which steps were skipped. No repository connected means none of the 52 code and infrastructure rules ran.
- Check the tier. A free scan records one page in the browser; a full scan walks the discovered routes.
- Check what was dismissed. Findings you closed earlier do not come back.
A small, well-configured static site really can come back clean
If coverage is complete and nothing was skipped, believe it.
Questions
A tool I used before found more. Why?
Most scanners report every missing header and every advisory as its own item, including ones that cannot hurt you. Here, findings are admitted on evidence and confidence, and duplicates across runtime and source are merged into one.
Something here wrong, missing or out of date? Tell us and we will fix the page.