{
  "fecha":"20260927-060539",
  "aplicacion":"DGAIA Hostelería",
  "dominio":"hospitality.dgaia.es",
  "ruta_detectada":"/opt/backups/dgaia-hospitality-360",
  "http_code":"200",
  "api_health":"200",
  "html_count":0,
  "js_count":1,
  "css_count":0,
  "resumen":{"total":3,"criticas":0,"altas":0,"medias":3,"bajas":0},
  "certificada":false,
  "incidencias":[
    {"id":"GI-0001","inspector":"Seguridad","severidad":"media","impacto":55,"riesgo":65,"tiempo_min":20,"prioridad":140,"titulo":"Falta cabecera HSTS","donde":"https://hospitality.dgaia.es","recomendacion":"Añadir Strict-Transport-Security si todo opera por HTTPS."},
    {"id":"GI-0002","inspector":"Seguridad","severidad":"media","impacto":50,"riesgo":60,"tiempo_min":15,"prioridad":140,"titulo":"Falta X-Content-Type-Options","donde":"https://hospitality.dgaia.es","recomendacion":"Añadir X-Content-Type-Options nosniff."},
    {"id":"GI-0003","inspector":"Seguridad","severidad":"media","impacto":55,"riesgo":65,"tiempo_min":30,"prioridad":140,"titulo":"Falta protección clara contra clickjacking","donde":"https://hospitality.dgaia.es","recomendacion":"Añadir CSP frame-ancestors o X-Frame-Options."}
  ]
}