Binding boundary
Candidate associations are not confirmed vulnerabilities and require target applicability validation.
Candidate contractDomain Signals PRO-015
Overall Signals Grade
The grade summarises governed external evidence; it is not a percentage of security. Its qualifier, coverage, confidence and safety caps are part of the result, not footnotes.
Bounded, non-exploitative Authorised external assessment.
Bounded evidence. Explicit responsibility. No hidden inference.
The useful answer
Overall Signals Grade shows how one part of the sealed assessment helps understand what the grade measures.
Overall Signals Grade shows how one part of the sealed assessment helps understand what the grade measures. The grade summarises governed external evidence; it is not a percentage of security. Its qualifier, coverage, confidence and safety caps are part of the result, not footnotes.
Route-specific context
The decision this page is designed to support
- Intended reader
- Buyer, security leader, board adviser
- Decision supported
- Understand what the grade measures. Overall Signals Grade shows how one part of the sealed assessment helps understand what the grade measures.
- Evidence discipline
- Score, base grade, display grade, qualifier, assessment completeness and evidence confidence travel together. Evidence basis: Candidate contract.
01
02
03
Grade policy v11
Precision only when the evidence earns it
A+95–100
Exceptional governed external posture, subject to strict coverage, confidence and safety conditions.
A / A-85–94.99
Strong externally observed controls with limited material pressure.
B+, B, B-70–84.99
Established protections with meaningful, prioritised improvement work.
C+, C, C-55–69.99
Mixed evidence: some controls are supported and material action remains.
D+, D, D-40–54.99
Weak governed external posture requiring focused remediation or validation.
E0–39.99
Material deficiencies or safety floors dominate the supported evidence.
INo score
Evidence is insufficient for a defensible grade.
A deliberate path
From permission to retained evidence
- 01
Identify the decision that Overall Signals Grade is designed to support.
- 02
Inspect the evidence, responsibility and uncertainty boundary before acting on the presentation.
- 03
Open the linked product or help route to move from explanation to the exact protected workflow.
Evidence before assertion
What the product can support
The service starts with the exact domain you submit and the permission you record. It observes governed external protocols, separates your evidence from provider-managed context and seals one consistent report for every audience. Score, base grade, display grade, qualifier, assessment completeness and evidence confidence travel together.
Binding boundary
Shared or provider-managed infrastructure is dependency context and is not automatically customer exposure.
Responsibility and attribution contractBinding boundary
Missing, stale, disputed or unavailable evidence cannot be treated as safety.
Capability reconciliation contractBinding boundary
Provider or collector failure cannot improve a grade.
Grade guard and capability testsBinding boundary
The Overall Signals Grade covers governed externally assessable evidence, not the organisation's complete security or breach likelihood.
Grade policy v11Direct answers
Questions a careful reader should ask
What does Overall Signals Grade establish?
Overall Signals Grade shows how one part of the sealed assessment helps understand what the grade measures. It establishes only what the governed evidence supports.
What does it not establish?
It does not prove complete organisational security, exploitability, breach likelihood or the absence of unobserved weaknesses.
How can I verify the conclusion?
Use the linked evidence or capability record to inspect source, observation time, target, responsibility and the condition required for closure.