> ## Documentation Index
> Fetch the complete documentation index at: https://docs.panguard.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Your First Scan

> Step-by-step guide to running your first Panguard security scan, understanding the results, and taking action on findings.

# Your First Scan

Panguard Scan analyzes your system in approximately 60 seconds, identifies security weaknesses, and provides actionable remediation guidance. All scan modes are free and open source.

***

## Prerequisites

Before running your first scan, ensure Panguard is installed:

```bash theme={null}
# Install via npm
npm install -g panguard

# Or via the one-line installer
curl -fsSL https://get.panguard.ai | bash

# Verify installation
panguard --version
```

***

## Run Your First Scan

<Steps>
  <Step title="Run a Quick Scan">
    Start with a quick scan to get an immediate overview:

    ```bash theme={null}
    panguard scan --quick
    ```

    This completes in approximately 30 seconds and covers OS detection, network interfaces, open ports, running services, password policy, firewall status, and security tool detection.
  </Step>

  <Step title="Review the Results">
    The scan displays findings grouped by severity:

    ```
      -- Network Interfaces -------------------

      en0    192.168.1.100  (Wi-Fi)
      lo0    127.0.0.1      (Loopback)

      -- Open Ports ----------------------------

      Port   Proto  Service     PID    Risk
      22     tcp    sshd        1234   HIGH
      80     tcp    nginx       5678   LOW
      443    tcp    nginx       5678   LOW
      3306   tcp    mysqld      9012   MEDIUM
    ```
  </Step>

  <Step title="Check Your Security Score">
    Every scan produces a 0-100 security score with a letter grade:

    ```
      -- Risk Score ----------------------------

      Score: 72/100 [------------------] Grade: C
      Trend: improving (+5 since last scan)

      Breakdown:
        Firewall:    80/100
        Open Ports:  60/100
        Passwords:   50/100
        Updates:     90/100
        Tools:       70/100
        Threats:     85/100
        Compliance:  65/100
        Response:    70/100
    ```
  </Step>

  <Step title="Address Critical Findings">
    Focus on CRITICAL and HIGH severity findings first. Each finding includes a description and remediation guidance.
  </Step>
</Steps>

***

## Quick Scan vs. Full Scan

| Feature                        | Quick Mode (`--quick`) | Full Mode (default) |
| ------------------------------ | ---------------------- | ------------------- |
| **Duration**                   | \~30 seconds           | \~60 seconds        |
| **OS detection**               | Yes                    | Yes                 |
| **Network interfaces**         | Yes                    | Yes                 |
| **Open ports**                 | Yes                    | Yes                 |
| **Running services**           | Yes                    | Yes                 |
| **Password policy**            | Yes                    | Yes                 |
| **Firewall status**            | Yes                    | Yes                 |
| **Security tools**             | Yes                    | Yes                 |
| **SSL certificate validation** | No                     | Yes                 |
| **Scheduled task audit**       | No                     | Yes                 |
| **Shared folder security**     | No                     | Yes                 |
| **Risk score**                 | Yes                    | Yes                 |

To run a full scan:

```bash theme={null}
panguard scan
```

***

## Severity Levels

| Severity     | Meaning                                | Recommended Action  |
| ------------ | -------------------------------------- | ------------------- |
| **CRITICAL** | Immediate risk of compromise           | Fix immediately     |
| **HIGH**     | Significant security risk              | Fix within 24 hours |
| **MEDIUM**   | Moderate risk, improvement recommended | Fix within one week |
| **LOW**      | Low risk, best practice suggestion     | Fix when convenient |
| **INFO**     | Informational finding                  | No action required  |

***

## Generate a PDF Report

Export your scan results as a professional PDF report:

```bash theme={null}
# English report
panguard scan --output my-report.pdf

# Traditional Chinese report
panguard scan --output my-report.pdf --lang zh-TW
```

The PDF includes:

1. **Cover page** -- Organization name, scan date, branding
2. **Executive summary** -- Risk score, grade, finding statistics
3. **Findings detail** -- Each finding with severity, description, and location
4. **Remediation guidance** -- Specific fix steps for each finding
5. **Compliance mapping** -- Findings mapped to ISO 27001 / SOC 2 / Taiwan Cyber Security Act

***

## What Comes After Your First Scan

<CardGroup cols={2}>
  <Card title="Enable Real-Time Protection" icon="shield" href="/guides/real-time-protection">
    Start Guard to continuously monitor and protect your system.
  </Card>

  <Card title="Set Up Notifications" icon="bell" href="/guides/notifications-setup">
    Configure Telegram, Slack, or email alerts for security events.
  </Card>

  <Card title="Generate Compliance Reports" icon="file-check" href="/guides/compliance-reports">
    Use scan findings to generate ISO 27001, SOC 2, or TCSA reports.
  </Card>

  <Card title="Deploy Honeypots" icon="flask" href="/guides/honeypots">
    Set up decoy services to detect and profile attackers.
  </Card>
</CardGroup>

***

## CLI Reference

```
panguard scan [options]

Options:
  --quick              Quick mode (~30 seconds)
  --output <path>      PDF report output path
  --lang <en|zh-TW>    Language (default: en)
  --verbose            Verbose output
```