How We Grade Your Security

The grade summarizes findings, not a security guarantee. Public grades require a completed scan with explicit complete coverage; missing coverage is shown as unavailable.

The Scoring Formula

min(99, max(0, 100 − 25×Critical − 8×High − 3×Medium − Low))Any critical finding forces grade F. There are no performance bonuses.

No findings alone does not prove coverage; without a report the grade is unavailable.

Interactive Score Calculator

An illustrative calculator using the same finding weights as the report. It is not a scan.

Load a real scan
Critical
−25 pts
0
High
−8 pts
1
Medium
−3 pts
2
Low
−1 pts
1
Live Result4 findings
85/99
B
100− 15 deductions
Final Score85
05099

Grade Scale (A+ to F)

A+

95–99

A

88–94

B

78–87

C

65–77

D

50–64

F

0–49

Hard cap: a single Critical finding forces grade F, regardless of the numeric score.

What is checked

Lightning scan

Enter a domain for initial DNS, TLS certificate and response-header checks.

Public and limited. Application code, sign-in and other pages are not covered.

Regular website scan

Add your site, verify ownership and choose an available scan profile.

Requires ownership verification. Check the report for checks that actually ran.

Repository scan

Connect GitHub access to inspect supported code and dependency checks.

Requires repository access. Coverage depends on supported languages and rules.

KAVOR — Find. Fix. Prove.