How we grade
How we grade
A DeployVet check looks at what a stranger can reach on your public site. It gives a score out of 100 and a grade. Here is what the grades and the badge mean.
| Grade | Score | In plain words |
|---|---|---|
| A | 90 to 100 | No serious issues found in what we check. |
| B | 75 to 89 | Mostly in good shape, with some smaller issues. |
| C | 60 to 74 | Several issues worth fixing. |
| D | 40 to 59 | Significant issues. |
| F | Below 40 | Serious issues, such as exposed secrets. |
How the score is worked out
Every check starts at 100. Each finding takes off points by severity, and a critical or high security finding caps the score. The full table is on the methodology page.
What the badge shows
- The grade, score and date of the latest check we have stored for that domain.
- Only A and B results get a badge. It is drawn by us from our own record, so it cannot be edited to show a better grade.
- It turns grey and says it is old after 30 days, and it stops showing if a newer check is below B.
- It links to the public result page for the domain.
What it does not mean
- It is an outside-in check at one moment. We do not log in, test your code or review how your business handles data.
- It is not a certification, an audit, a penetration test or a guarantee. A good grade means we did not find the issues we check for.
- We can miss things. Findings and scores come from fixed rules, not from a person reviewing your site.
See what we check and what we do not, or get your badge if you have an A or B.