Skip to main content
Applications
Security Posture Management
Continuous Monitoring
Vendor Risk Management
Trust Management Hub
Cyber Insurance
National Cybersecurity
Bitsight API docs
Bitsight Academy
Viewing as guest:
Log In
Sign in
Submit a request
Bitsight Knowledge Base
Bitsight Data
Bitsight Data
Learn about Bitsight data, including risk types (risk categories & risk vectors), findings, assets.
Risk Category: Compromised Systems
Compromised Systems Risk Category
Compromised System Destination IP Disclosure Policy
Botnet Infections Risk Vector
Spam Propagation Risk Vector: Core Overview
Malware Servers Risk Vector
Unsolicited Communications Risk Vector
See all 7 articles
Risk Category: Diligence
Diligence Risk Category
SPF Domains Risk Vector: Core Overview
DKIM Records Risk Vector: Core Overview
TLS/SSL Certificates Risk Vector
TLS/SSL Configurations Risk Vector
Open Ports Risk Vector: Core Overview
See all 25 articles
Risk Category: User Behavior
User Behavior Risk Category
File Sharing Risk Vector
File Sharing Categories
Exposed Credentials Risk Vector
Risk Category: Public Disclosures
Public Disclosures Risk Category
Security Incidents Risk Vector
Other Disclosures Risk Vector
Marsh McLennan Study: Correlation Between Bitsight Analytics and Cybersecurity Incidents
Assets
What is an Asset?
Asset Importance
Asset Types
How Assets are Detected and Identified
Attribution Data
Get Detailed Explanations for How Infrastructure is Attributed to an Organization's Assets
Grace Period for Company-Provided Infrastructure
Impacts Risk Vector Grade
The Graph of Internet Assets
Classification Methods
Risk Categories: Overview
Finding Severity
Botnet Infections Finding Considerations
Malware Servers Finding Considerations
Unsolicited Communications Finding Considerations
Potentially Exploited Finding Considerations
See all 9 articles
Collaboration & Connections
Collaboration Status via the Client/Vendor Access Program
Connection Email Templates Examples for VRM
Reasons for requesting to collaborate via the Client/Vendor Access Program
Request Access to Your Vendor(s) Security Profile in VRM
Control Insights Data
Insights to Control Framework Mapping
Insights to Control Framework Mapping: Browser Configurations
Insights to Control Framework Mapping: Detected Services
Insights to Control Framework Mapping: Device Management
Insights to Control Framework Mapping: DNS Configurations
Insights to Control Framework Mapping: Email Configurations
See all 17 articles
Delegated Security Controls
Delegated Security Controls Overview
Findings Impact of Delegated Security Controls
How Companies with Delegated Security Controls are Presented
Findings
What is a Finding?
Finding Behavior
Findings Search Fields
Compromised System Findings
Botnet Infection Findings
Spam Propagation Findings
See all 21 articles
Finding Messages
SPF Domains Risk Vector: Understanding Findings and Remediation Tips
DKIM Records Findings Messages and Tips for Remediation
TLS/SSL Certificates Finding Messages
TLS/SSL Configurations Finding Messages
Open Port Finding Messages: Detected Services
Open Port Finding Messages: Typical Services
See all 14 articles
Findings: Troubleshooting
Access OCR/HHS Breach Reports
DMARC Risk Vector: Why Do I Have a Bad DMARC Finding?
Lifetime and Offline Assets: Frequently Asked Questions
Troubleshooting Insecure Systems Service: NetBios
Why Is My DKIM Grade a C When I Have No Findings?
Why Is My TLS/SSL Certificates Grade a C When I Have No Findings?
See all 8 articles
Data Collection Methods
Priority Scanning powered by Groma
Crawlers
Request a New Vulnerability
Compromised Systems Events Proven to be Originating from Testing Environments
Threat Research Process
Report a Public Disclosures Event
See all 29 articles
Infrastructure Data
Company-Provided Assets: Messages, Reasons, & Statuses
Control and Responsibility for IP Addresses and Domains
Infrastructure Change Types
Normalization
Request a Name Change for a Shell Company
What is a Shell Company?
Network Map & Company Information
Bitsight Inventory Status
Company Mapping Scenarios
Company Metadata
Company Relationships
Customize your Company ID
Fourth Party Data Collection Methods
See all 23 articles
Rating Designations
Automated Ratings
Rating Designations
What is a Service Provider a.k.a. "a Fourth Party"?
Low Confidence Ratings
Primary Ratings
Self-Published Companies
Standards & Authorities
Accepted Accounting Standards
Certificate Authorities
Cookie Assessment Exclusion
Cross-Domain Subresource Integrity Exclusion
Regional Internet Registries (RIR WHOIS)
Supported Operating Systems
See all 10 articles
Vendor Risk Management & Trust Management Hub Data
Risk Vector Data in Framework Intelligence
Artifacts
Assessment Life Cycle Stages in VRM
Data Residency
Set the Criticality of VRM findings
Instant Insights Data and Technologies for VRM and TMH
See all 10 articles
Vendor Information
Vendor Tags
View the Company Info Panel in VRM
Vulnerabilities & Infections
CVE Statements
Glossaries
Diffie-Hellman Primes and Keys FAQs
Forms of Attacks
Glossary of Terms
Glossary of Terms - File Sharing
Glossary of Terms - Public Disclosures
Glossary of Terms: Bitsight VRM
See all 24 articles