Back to Resources Ver en español

Reports

Website audits and field cases, with the evidence behind every finding.

Each report is one real case, written up with the evidence and the numbers behind it.

The website audits read only what a site already serves to anyone: the TLS certificate and security headers, DNS and mail authentication records, the software versions a page discloses, and the page content. Nothing is probed, scanned or accessed.

The owner sees the findings first and has 30 days to fix them before anything is published. Credentials, personal data and exploit detail are removed, and an owner can have a report withheld or taken down. Disclosure policy.

Audits are led by Rodrigo Landa, President of Metrolux Solutions Inc.

Reports

Twenty compliance documents, all returning 404 - Four Star Cargo

Fifteen findings from a freight forwarder's site: a compliance library returning 404 on all 20 documents, three technology stacks under one domain, and a quote calculator that prices negative shipments.

Nineteen days from losing the domain - Cuban Buffet

Five findings on a restaurant's domain: registrar locks blocking renewal 19 days before expiry, the site redirecting visitors to a scam page, no valid SSL certificate, and a printed QR code leading nowhere.

The provider closed and took the domain with it - Mi Cayman Services

One provider held the domain, the website and the mail server, the client had no direct access to any of it, and all three were lost the day that provider stopped trading.

The channel decided the return, not the refit - Dell PowerEdge T420

Four refit budgets for a 2012 server, costed against live component prices. The cheapest build returned 368% and the recommended one returned the most dollars, and which was right depended entirely on where it sold.