METHOD 1.0.0

Technical security methodology

A technical view of transport security, response headers and public website evidence.

What this edition measures

Transport and response-security observations, with the largest weights assigned to HTTPS and certificate validation.

Weights

SignalWeight
HTTPS encryption30
TLS certificate25
Public DNS10
Secure redirect10
HSTS8
Content Security Policy5
Clickjacking protection3
MIME protection3
Referrer Policy2
Permissions Policy1
Secure cookies3

Calculation

The observed signal score is 100 × detected weight ÷ assessed weight. Not-assessed signals do not enter that denominator. Coverage is the proportion of selected signals with a stored observation. Missing, blocked and legacy data remain explicit unknowns.

Evidence levels

At least 50% coverage is needed for a descriptive evidence level. Scores of 90+, 75+, 45+ and below 45 are labelled strong signals, generally positive signals, mixed evidence and limited evidence. A recorded threat-provider match takes precedence as elevated concerns. These labels describe selected observations, not a transaction recommendation.

Confidence and freshness

Confidence is medium when preserved automatic evidence has at least 70% coverage and is no older than 30 days; otherwise it is low. No report is labelled high confidence because the scanner cannot validate real-world fulfilment. The original scan date is preserved.

Publication and indexing

Reports can be read without being offered for indexing. Indexability requires preserved original observations, source URLs, at least 70% coverage, a scan no older than 30 days and a store classification. Incomplete laboratory and checkout profiles remain noindex until their distinct missing measurements are implemented. Source noindex and publication decisions are respected.

Limits

Manual changes and reviews

Editorial adjustments are labelled separately and do not overwrite the automatic observations used for this brand score. Customer reviews are not inputs to the calculation. Reviews without verifiable original references are not syndicated.

Automated analysis does not guarantee the safety of a future transaction.