Skip to content

Security Scorecard

An outside-in security score, no agent required.

What it does

The Security Scorecard summarizes an organization's externally observable security posture as a single 0-100 score with factor-level grades. The assessment is based entirely on external observation, so the vendor does not need to install anything.

The problem it solves

Judging a vendor's security from a questionnaire alone is slow and easy to game. Teams need objective, continuously updated evidence.

The value to you

An objective, trend-able score that surfaces the most urgent findings first and gives a shared language for risk conversations. As a rule of thumb, 80+ is good, 50-79 warrants monitoring, and below 50 is high risk.

Key capabilities

  • Factor grades across network, DNS/email, TLS/SSL and reputation
  • Severity breakdown (high / medium / low) with finding drill-down
  • Finding status lifecycle: open, resolved, false positive, accepted risk, mitigated
  • Comments and score history to track trends over time