Agentic Testari Sentinel Hub · FriendlyAI agentictestari.com

Confidential

TEASER L3 preview · unlock FULL

Digia L3 — teaser preview

6 HIGH · 5 MEDIUM. Severe risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and va

Target digia.com Date 2026-07-29 RoE public-max Mode TEASER

6

HIGH

5

MEDIUM

0

INFO

—

OK

Summary (teaser)

This is not “just a technical PDF”

A hacker uses these findings as a map. A hacker agent runs the same playbook in a 24/7 loop. Teaser = severity. FULL = proof + impact + fix.

recon → invasion → destructive · detail in FULL

Severe risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and validation — so the team acts.

Stack in this run

Component	Included?	Note
Sentinel L3	YES	public-max
ParviClaw Core + AWP	YES (lab)	full pack in FULL
ParviSight	partial	as run
PayBotFin Witness	as engaged	honest scope in FULL

HIGH findings — locked in teaser

DG-H1

Citrix NetScaler/ADC Gateway (login.digia.com)

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

DG-H2

DMARC p=none

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

DG-H3

Entra SAML channel hosts

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

DG-H4

Center hosts throw Shibboleth config errors

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

DG-H5

DFAU admin/backend public SPAs

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

DG-H6

Public non-prod/staging estate

HIGH

████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████
████ ██████████ ████████ · ████████████ ████████ · ████ / ████████

🔒 Impact · link · PoC · owner · fix in FULL

MEDIUM findings — short preview

DG-M1

Thin marketing CSP

MEDIUM

Preview

Thin marketing CSP Full impact, PoC, owner and fix → FULL report.

DG-M2

No security.txt / CAA gaps

MEDIUM

Preview

No security.txt / CAA gaps Full impact, PoC, owner and fix → FULL report.

DG-M3

Missing nosniff/XFO samples

MEDIUM

Preview

Missing nosniff/XFO samples Full impact, PoC, owner and fix → FULL report.

DG-M4

Extra edge ports / scan noise

MEDIUM

Preview

Extra edge ports / scan noise Full impact, PoC, owner and fix → FULL report.

DG-M5

Third-party chat/bot IDs

MEDIUM

Preview

Third-party chat/bot IDs Full impact, PoC, owner and fix → FULL report.

AWP + Core annexes (preview)

In FULL each file has captions (what it is / what it proves / what it is not) + how to run npx agent-witness-protocol verify.

In the FULL report

Open FULL report

🔒 Remediation order + PoCs + fix validation

In the FULL report

Unlock FULL