SecurityScorecard commissioned a team of independent pentest experts to audit a sample of Scorecards to objectively determine the accuracy of our IP and domain attribution. The accuracy for positively attributing IP Addresses was found to be 94%, and for DNS Records it was found to be 100%.
Menu
Metrics
Live metrics on our performance, in addition to overall statistics, corrections, response times, and ratings stability.
Independent accuracy verification
SecurityScorecard commissioned an independent report to study the accuracy of our attribution:
"The accuracy for positively attributing IP Addresses was found to be 94% while for DNS Records it was found to be 100%."
Refutes and accuracy
Any rated entity can challenge their digital footprint or any of the measurements we provide on it, whether they are a customer or not.
To demonstrate our scoring accuracy, these charts show the fraction of our findings that are refuted.
These accuracy metrics are based on the number of assets or findings refuted compared to the number of assets or findings for the entities that are refuting. For example, if 10 companies each refute 10 domains (100 domains in total) and these 10 companies have 1,000 domains each (10,000 domains in total), then the refute rate is 1% (number of domains refuted/number of domains).
We show a trailing 7 day average to make the data easier to interpret.
Response times and findings
Refute response time
This chart shows how long SecurityScorecard takes to respond to and resolve refute requests. (Response time displayed in hours, as a 7-day trailing average)
Findings refute rate
This chart shows the refute rate for scored findings. It shows the fraction of Scorecard findings entities refute. (Refute rate displayed as a 7-day trailing average.)
Digital footprint metrics
IP misattribution rate
This chart shows a trailing 7-day trailing average of our IP misattribution rate.
Domain misattribution rate
This chart shows a trailing 7-day average of our domain misattribution rate.
Score improvements through engagement
Many of SecurityScorecards customers use our ratings to monitor the security of their vendors. They subsequently invite vendors onto the platform so their vendors can monitor their own scores. The chart below shows the difference in score improvements over time for low-scoring companies invited onto the platform.
Rated companies that are invited to the platform with low security grades (C, D, or F) typically exhibit on average a 7- to 8-point improvement within 3 months. Meanwhile, the average score of unengaged companies remains relatively unchanged over the same period of time.