Automatic external scan
Checks what anyone on the internet can see about a domain: email spoofing protection, DNS, TLS certificates and website security headers. The scan counts for 25% of the overall score.
How the score works
Each question is rated on a 0–4 maturity scale.
When a domain has been scanned, the overall score is 75% self-assessment and 25% external scan. Each external check scores pass 1, warning 0.5, fail 0, weighted by importance; informational results don't count.
Critical controls (marked) carry triple weight. If any critical control is rated 0, the overall score is capped at 49, because a single missing basic such as MFA or offline backups is often enough for a breach to succeed.
Priorities rank each control below level 3 by how much raising it would lift the overall score.