Methodologies

Rating Methodologies

• Domain Squatting Risk Vector: Understanding Your Rating Details
• How are Bitsight Security Ratings Calculated?
• What is a Bitsight Security Rating?
• How are Bitsight Security Ratings Calculated Within Parent-Subsidiary Relationships?
• Risk Vector Grading with Insufficient Data
• Why Do Bitsight Security Ratings Fluctuate?

See all 11 articles

Risk Category Calculation

• Investigating and Appealing Sinkhole Findings
• How is the Compromised Systems Risk Category Calculated?
• How is the Diligence Risk Category Calculated?
• How is the User Behavior Risk Category Calculated?
• How is the Public Disclosures Risk Category Calculated?

Risk Vector Assessment

• Patching Cadence Risk Vector has been reconfigured to Critical Vulnerabilities Management
• How is the DKIM Records Risk Vector Assessed?
• How is the TLS/SSL Certificates Risk Vector Assessed?
• How is the TLS/SSL Configurations Risk Vector Assessed?
• How is the Open Ports Risk Vector Assessed?
• How is the Web Application Security Risk Vector Assessed?

See all 11 articles

Web Application Security Tests

• Cookie SameSite Attribute Security Test and Remediation Tips
• Remediating Authentication on Insecure Channel findings
• Cross-Site Request Forgery (CSRF) Mitigations Present
• Remediating CMS Administration Portal Exposed
• Determining if a HSTS Preload Directive is Present and its effect on the WAS Risk Vector
• Mixed Content Security Test and Remediation Tips

See all 23 articles

Finding Lifetime

• What is a Finding Lifetime?
• Why Do Findings Have a Decay and Lifetime Period?

Vendor Risk Management & Trust Management Hub Methodologies

• Calculating Questionnaire Scores in VRM
• Vendor Scoring: Trust, Impact, & Risk
• Vendor Scoring: Trust Score
• Vendor Score: Impact Score
• Vendor Score: Risk Score

Ratings Algorithm Update

• Why is the Ratings Algorithm Updated?