Sample report
IT audit report sample: the real report on our own website
The review of sondeon.com from October 11, 2026, as a customer receives it: a one-page summary for leadership and four findings with their evidence and status. Two are still open.
Updated on Reviewed by José María Salido
The one-page summary, for leadership
Status: good on what was measured, with four findings: 2 closed in this version and 2 open
Measured on October 11, 2026 against the live website. The scores come from Lighthouse in the lab, on a simulated mobile device, for the Spanish home page: the median of three runs, and one of the three scored 99 for performance. It is one website on one day. Of the four findings, two are still open: the privacy policy and the main button.
- All four Lighthouse scores for the home page on mobile: performance, accessibility, best practices and SEO
- 100
- Time to render the main content on mobile (LCP)
- 1.4 s
- Sitemap URLs that return 200, out of the 135 it lists
- 135
Figures measured on October 11, 2026. The Lighthouse ones are lab figures on a simulated mobile device, not data from real visits.
Four findings, as they arrive, with their status
The privacy policy is published with details still missing
PriorityHigh
- Where
- Privacy policy for the form, in all five languages
- Evidence
- The text “to be completed after the legal review” appears 10 times on the published page; the first, in place of the company name, tax number and address of whoever is responsible for the data
- Impact
- Someone about to send their details through the form cannot read who answers for them
StatusOpen Counted in this review on the published page: the text appears 10 times.
The cookie notice covered the main button on mobile
PriorityHigh
- Where
- First screen of the home page, on a first visit from a phone
- Evidence
- Before the fix, the notice covered the button in 16 of 30 combinations of screen size, language and color scheme
- Impact
- The first thing a visitor on a phone saw was a notice on top of the page's main action
StatusClosed in this version Measured again in this review on the live website, with the real notice on a simulated phone: covered in 0 of 30 combinations.
The button says “Book a free meeting” and offers no day or time to pick
PriorityMedium
- Where
- Main button on the home page and the form it leads to
- Evidence
- The button scrolls down to a form submitted with “Request the free meeting”, which says the day and the time are set afterwards by email; there is no calendar and no field for a day or a time
- Impact
- Whoever presses “book” expects to pick a day and a time there and then, and has to wait for an email
StatusOpen Read in this review on the live home page: the button leads to “#solicitar”, the form is submitted with “Request the free meeting” and it has no field for a day or a time.
The llms.txt file was mostly one list of links, repeated
PriorityMedium
- Where
- sondeon.com/llms.txt, the file AI assistants read
- Evidence
- 79.6% of the file was the same lists of links in five languages, 14.0% was text, and it answered no question
- Impact
- An AI assistant reading it found addresses, and no answer about the service it could quote
StatusClosed in this version Measured in this review on the published English file: more than 80% is text ahead of the lists of links, and it answers 28 questions.
How to read a finding in an IT audit report
Where it is and how to check it yourself
Why it matters, put in leadership's terms
What priority it has, and whether it is still open or already closed
Frequently asked questions
Can I see a sample IT audit report?
Yes, it is this page. It is the report from the health check of our own website, sondeon.com, measured on October 11, 2026: three figures and four findings, two open and two closed. It is not any customer's report.
What does the report include and how is it delivered?
The state of each system reviewed, each finding with its evidence and the list ranked by impact. It is delivered in a meeting with your team, and leadership gets a one-page summary.
Can a non-technical person understand the report?
Yes. The first page is written for leadership: what state each system is in and what to do first. The technical detail, with the evidence for each finding, comes after and is for your team.
Can I take just the report and make the improvements myself?
Yes. Each finding says where it is, how to check it and why it matters, so your team or another provider can fix it. A fix from us is separate and only if you ask.
Do you review again once we have fixed the findings?
Yes, in the next review. We recommend repeating the health check every three months: each report is compared with the previous one, so you can see which findings were closed and which are still open.
Request your free meeting
Fill in the form and we email you to set a day and a time. It is 30 minutes to see what you have and what to review first.