{
  "note": "Aggregate only. 'Sensitive' means the code takes actions like payments, email, file or shell access; 'unauthenticated' means no auth check was detected in static analysis. Signals, not confirmed vulnerabilities.",
  "servers_scanned": 2330,
  "latest_scan": "2026-08-29 14:03:46",
  "status_counts": {
    "auth_only": 220,
    "authenticated_sensitive": 157,
    "no_sensitive": 1377,
    "unauthenticated_sensitive": 576
  },
  "sensitive_servers": 733,
  "sensitive_without_auth": 576,
  "identity_gap_pct": 78.6
}