Skip to main content
Bitsight Knowledge Base Help Center home page
Security Performance Management
Continuous Monitoring
Vendor Risk Management
Trust Management Hub
Cyber Insurance
National Cybersecurity
  • Sign in
  • Submit a request
  1. Bitsight Knowledge Base
  2. Methodologies
  3. Rating Methodologies

Rating Methodologies

  • How are Bitsight Security Ratings Calculated?
  • What is a Bitsight Security Rating?
  • How are Bitsight Security Ratings Calculated Within Parent-Subsidiary Relationships?
  • Risk Vector Grading with Insufficient Data
  • Observed Devices Thresholds for Grading Desktop and Mobile Software Risk Vectors
  • Why Do Bitsight Security Ratings Fluctuate?
  • Web Application Header Finding Grades
  • What Content-Security-Policy (CSP) Directives are Assessed?
  • OS & Browser Version Evaluation
  • Software Support Life Cycle & End-of-Life Policy
  • Web Application Security: Currently Checked Javascript Library Vulnerabilities

Contents © 2025 BitSight Technologies, Inc. ("Bitsight")

Privacy Policy | Disclaimer | Terms and Conditions | Contact Bitsight | Bitsight Academy | Bitsight Support