Web service audit missed a second vhost

I run two sites on the same box, different server_name. The report only covered the primary vhost and never mentioned the second one, which is the one I was actually worried about.