Security Score

Every audit produces a security score — a letter grade (A+ through F) that summarizes the engagement at a glance. The score is what executives, auditors, and dashboards see first.

How it’s calculated

Each audit starts at a perfect 100. Findings deduct points based on severity:

Severity	Deduction
Critical	−30 points
High	−15 points
Medium	−8 points
Low	−3 points
Informational	0 points

The final numeric score maps to a letter grade:

Score	Grade
97–100	A+
93–96	A
90–92	A−
87–89	B+
83–86	B
80–82	B−
77–79	C+
73–76	C
70–72	C−
60–69	D
0–59	F

The score floor is 0 — multiple criticals don’t push it negative.

Example calculations

Findings	Score	Grade
0 findings	100	A+
3 Medium, 2 Low	70	C−
1 High, 4 Medium, 6 Low	35	F
2 Critical, 1 High	25	F
5 Low	85	B

What the score is and isn’t

The score is good for:

One-line summaries in dashboards, Slack notifications, and PDF covers
Trend tracking across recurring audits
Risk-tier classification across many workspaces (MSSP use case)

The score is not:

A substitute for reading the findings
A measure of total risk (one critical finding can be catastrophic regardless of score)
A comparison metric between different products (an A on one app doesn’t mean it’s “more secure” than a B on another with a different surface)

Score in the API

The score is returned with every audit:

{
  "audit": {
    "id": "audit_abc123",
    "status": "completed",
    "score": 65,
    "grade": "D",
    "findingCount": 14,
    "severityBreakdown": {
      "critical": 1,
      "high": 2,
      "medium": 4,
      "low": 6,
      "informational": 1
    }
  }
}

Tracking over time

The workspace dashboard plots score trend across all audits run against the workspace. Use this to:

Verify remediation progress sprint over sprint
Detect regressions when new releases introduce findings
Demonstrate continuous improvement to stakeholders

Getting Started

Audits

How It Works

Platform

Billing

Security Score

Security Score

How it’s calculated

Example calculations

What the score is and isn’t

Score in the API

Tracking over time

​Security Score

​How it’s calculated

​Example calculations

​What the score is and isn’t

​Score in the API

​Tracking over time

Security Score

How it’s calculated

Example calculations

What the score is and isn’t

Score in the API

Tracking over time