Alice, a vulnerability assessment engineer at a bank, is told to find all the vulnerabilities on an internet$-$facing web application server running on port HTTPS$.$ When she finishes the vulnerability scan, she finds several different vulnerabilities at different levels. How should she proceed?