Configure Your Bitsight Badge

The Bitsight Badge page in the Security Posture Management application [ Organization ➔ Bitsight Badge] allows you to share the Bitsight Security Rating for My Company, any subsidiaries covered by a MySub subscription, or their associated primary ratings. This badge can be shared with customers, prospects, and key stakeholders on your internal or external website. Proactively sharing your rating increases transparency and showcases the strength of your cybersecurity performance program.

The badge can be displayed on your website. Once published, the badge automatically updates once a day. It includes a link to a “Learn More” page, where stakeholders can explore the structure and concepts behind Bitsight Security Ratings. You can also share the Learn More page directly by sharing this URL: https://service.bitsighttech.com/trust/landing/generic.html

See our implementation of the badge: http://bitsight.com/security

Requirements

Instructions

1. Configure your badge from the Badges tab [ Organization ➔ Bitsight Badge ➔ Badges].

2. Customize how your rating is presented on your badge (90-Day Average vs. Current Rating)

3. Direct where to display the badge by entering the domain in this field. If the badge does not appear, try adding the full URL to this field and try again. The embed code only works on web pages with domains designated by this field.
   Please note: The embed code makes a request to the trust.bitsighttech.com host in order to update your rating. If your website has a Content Security Policy (CSP), you will need to allow requests from trust.bitsighttech.com as an approved domain. Refer to Mozilla MDN Web Docs for an example of how to add a trusted domain to your CSP.
4. Once your Bitsight Badge is configured, select Save changes to finalize your badge configuration.

5. Get the badge embed code [ Organization ➔ Bitsight Badge ➔ Copy Embed Code] and provide it to your website development team to add to the relevant webpage. Once the webpage is updated, the badge immediately loads and appears on your webpage.

   Embed Code Example

   <div  id="bitsight-widget"> </div>
     <script>
     const div=document.getElementById("bitsight-widget");
     const req=new XMLHttpRequest();
     req.open("GET","https://trust.bitsighttech.com/rating/(company guid)");
     req.onload=function(e){if(req.readyState===4){if(req.status===200){const {response}=req;
     div.innerHTML=response;
       }
     }
   };
   req.send();
   </script>

Badge Specifications

• The size and layout of your badge are determined by your choices on the Badges tab.
• The first line of the embed code (<div id="bitsight-widget"> </div>) establishes a container and sets the location of the badge. Place this line of code wherever you want the badge to appear on the webpage. No additional formatting is needed for the badge to work, but you may need to adjust the dimensions of your page.
• The code between <script> and </script> is javascript and not HTML.
• The remaining lines of code (until req.send()) are used to create a request object, give it instructions on how to handle the response, check the response to see if it is good, and finally send that request to trust.bitsighttech.com.

Layout Options

Each layout option has a unique size, shape, and included content. Select any of the following options to see a preview of the badge:

Badge

Narrow

Wide