See the conclusion first
Begin here when you need to understand what the grade measures. Stay with the domain, relationship or service state named on the page; the task does not widen silently into a different security or product claim.
Authorised external exposure management
Overall Signals Grade
This page helps you understand what the grade measures. A domain becomes one clear, traceable assessment, not a collection of disconnected scanner outputs.
Bounded collection. Explicit permission. No exploitation or authentication attempts.
The useful answer
Understand what the grade measures
A domain becomes one clear, traceable assessment, not a collection of disconnected scanner outputs. This page helps you understand what the grade measures. The relevant evidence, owner and limit remain available from the same route.
Useful for: buyer · security leader · board adviser.
How grading works
Precision appears only when the evidence supports it
A+95-100
Exceptional evidence-backed external posture with additional safeguards
A to B-70-94.99
Strong to good externally visible controls, with remaining actions kept visible
C+ to D-40-69.99
Mixed controls and material evidence requiring prioritised attention
E0-39.99
Weak result, subject to evidence and safety floors
INo score
Insufficient evidence for a defensible grade
In practice
From permission to useful action
Open the evidence behind it
Shared or provider-managed infrastructure is dependency context and is not automatically customer exposure. Open the relevant report evidence when you need to verify the source, observation time, attribution or qualification behind it.
Keep uncertainty visible
Complete the step shown on the page, then check the resulting state before moving on. Unknown, unavailable and not-applicable outcomes remain distinct, so absence is never presented as a successful or reassuring result.
Carry the same fact into reports and monitoring
Turn the recorded evidence into actions, ownership, monitoring and useful exports. Record the resulting owner, evidence or recovery state where the product provides it, so another person can verify what happened without repeating the task.
What you can rely on
What supports the decision
The conclusion, evidence and limits stay connected.
Clear scope
Candidate associations are not confirmed vulnerabilities and require target applicability validation.
Traceable evidence
Shared or provider-managed infrastructure is dependency context and is not automatically customer exposure.
Honest limits
Missing, stale, disputed or unavailable evidence cannot be treated as safety.
Important boundary
What this does not mean
Overall Signals Grade supports one defined outcome: understand what the grade measures. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Questions answered
Read the conclusion and its limits together
What does Overall Signals Grade help me decide?
This page helps you understand what the grade measures.
What evidence sits behind the answer?
Domain Signals keeps the source, observation time and evidence state alongside each conclusion. The relevant report view provides the technical detail when you need to inspect it.
What should I not conclude?
Overall Signals Grade supports one defined outcome: understand what the grade measures. Domain Signals is not a penetration test, certification, data-residency assessment or prediction of breach likelihood. Missing evidence is not evidence of safety.
Keep exploring