Rubric
How the score is calculated
Version 1.0.0. Switch between a plain-English walkthrough and the full technical rubric. The numbers on this page are the same exports the scanner uses, so the page and the code cannot drift apart.
What the scan looks at
We only look at what your domain already shows the public. Nothing hidden, nothing private, and no login. It is like checking whether your shopfront door is locked by looking from the street.
We read your public address-book records (DNS), the settings your website hands to visitors' browsers, and whether your domain is connected to Microsoft 365 or Google Workspace.
Because we stay outside, there is a lot we cannot see: whether staff use a second step to log in, which sign-in rules are in place, whether old insecure logins are still allowed, whether email is being quietly forwarded elsewhere, or whether your backups actually work. Those decide how bad an incident gets, and they need someone inside your system to check. Treat this score as a quick first look, not a full report card.
How the score is worked out
Every domain starts at 100. We only take points off for problems we can prove from the outside. If we cannot be certain, we still show it as a note, but it does not change your score.
Each problem costs points based on how serious it is. No single area, such as email or website security, can take off more than 40 points on its own, so one weak spot cannot sink the whole score.
The score never drops below 0. If we could not check an area at all, we leave it out rather than marking it zero.
How much each problem costs
| Severity | Points off | What it means |
|---|---|---|
| critical | 25 | Broken right now. Treat as urgent. |
| high | 12 | A serious gap. Worth fixing soon. |
| medium | 5 | Worth fixing, but not urgent on its own. |
| low | 2 | A minor hardening improvement. |
| info | 0 | Context only. Never changes the score. |
What the grades mean
| Grade | Score | What it means |
|---|---|---|
| A | 90 and above | Strong. The public-facing basics are in good shape. |
| B | 78 to 89 | Good. A few gaps left to close. |
| C | 62 to 77 | Fair. Fixable issues are starting to add up. |
| D | 45 to 61 | Weak. Several important gaps are open. |
| F | 0 to 44 | Poor. Needs attention across the board. |
Every check, by area
Open an area to see what we look for and what to do about it.