Rating Methodologies
- How are Bitsight Security Ratings Calculated?
- What is a Bitsight Security Rating?
- Vulnerability Severity: Bitsight Severity & CVSS
- How are Bitsight Security Ratings Calculated Within Parent-Subsidiary Relationships?
- Risk Vector Grading with Insufficient Data
- User Count Thresholds for Grading Desktop and Mobile Software Risk Vectors
Risk Category Calculation
Risk Vector Assessment
- How is the SPF Domains Risk Vector Assessed?
- How is the DKIM Records Risk Vector Assessed?
- How is the TLS/SSL Certificates Risk Vector Assessed?
- How is the TLS/SSL Configurations Risk Vector Assessed?
- How is the Open Ports Risk Vector Assessed?
- How is the Web Application Headers Risk Vector Assessed?
Web Application Security Assessments
- Web Application Security Assessment: Cross-Site Scripting
- Web Application Security Assessment: Components with Known Vulnerabilities
- Web Application Security Assessment: Broken Authentication and Access Control
- Web Application Security Assessment: Sensitive Data Exposure
- Web Application Security Assessment: Security Misconfiguration