The included Digital Ocean checks are listed below. For more information about each check, see the link provided.
The firewall has an outbound rule with open access
The firewall has an inbound rule with open access
SSH Keys are the preferred way to connect to your droplet, no keys are supplied
The load balancer forwarding rule is using an insecure protocol as an entrypoint
Spaces bucket or bucket object has public read acl set
Force destroy is enabled on Spaces bucket which is dangerous
Spaces buckets should have versioning enabled