What this edition measures
Transport and response-security observations, with the largest weights assigned to HTTPS and certificate validation.
Weights
| Signal | Weight |
|---|---|
| HTTPS encryption | 30 |
| TLS certificate | 25 |
| Public DNS | 10 |
| Secure redirect | 10 |
| HSTS | 8 |
| Content Security Policy | 5 |
| Clickjacking protection | 3 |
| MIME protection | 3 |
| Referrer Policy | 2 |
| Permissions Policy | 1 |
| Secure cookies | 3 |
Calculation
The observed signal score is 100 × detected weight ÷ assessed weight. Not-assessed signals do not enter that denominator. Coverage is the proportion of selected signals with a stored observation. Missing, blocked and legacy data remain explicit unknowns.
Evidence levels
At least 50% coverage is needed for a descriptive evidence level. Scores of 90+, 75+, 45+ and below 45 are labelled strong signals, generally positive signals, mixed evidence and limited evidence. A recorded threat-provider match takes precedence as elevated concerns. These labels describe selected observations, not a transaction recommendation.
Confidence and freshness
Confidence is medium when preserved automatic evidence has at least 70% coverage and is no older than 30 days; otherwise it is low. No report is labelled high confidence because the scanner cannot validate real-world fulfilment. The original scan date is preserved.
Publication and indexing
Reports can be read without being offered for indexing. Indexability requires preserved original observations, source URLs, at least 70% coverage, a scan no older than 30 days and a store classification. Incomplete laboratory and checkout profiles remain noindex until their distinct missing measurements are implemented. Source noindex and publication decisions are respected.
Limits
- The scanner does not perform penetration testing or verify fulfilment of orders.
Manual changes and reviews
Editorial adjustments are labelled separately and do not overwrite the automatic observations used for this brand score. Customer reviews are not inputs to the calculation. Reviews without verifiable original references are not syndicated.
Automated analysis does not guarantee the safety of a future transaction.