Skip to main content
For AI agents: a documentation index is available at https://docs.coverbase.com/llms.txt. This page is also available in markdown by appending .md to the URL.
This guide is part of the User Guides collection. For the same rating on a vendor, see the Security intelligence guide.
Security Rating runs the outside-in scan Coverbase uses on your vendors against your own domain. You see the score, the findings behind it, and what to fix first. The mistake people most often make is scanning a marketing domain instead of the domain their customers actually use, so check the domain before your first scan.

​
Finding it

Click Security Rating in the left navigation. You need permission to view organization settings. Starting a scan and changing settings need permission to edit them.

​
Start the first scan

The first time you open the page, enter your primary domain and click Start scan. The field is filled in from your organization’s website. Subdomains are found automatically, so enter the main domain only. The scan reads public records and makes ordinary connections to your websites, the same as it does for a vendor. It usually finishes in about two minutes. The page updates on its own.

​
Read your rating

The page is the same as a vendor’s security page, with three differences:
  • Next steps says how to fix each item, instead of what to ask a vendor.
  • There is no industry comparison, related domains or certifications section.
  • Hosting Locations shows where your hosts are, without flagging them against your approved countries. Those countries apply to your vendors.
Read Breach and ransomware risk and How much to trust the rating for what the indicators and the confidence chip mean.

​
Rescan after a fix

Click Rescan now after you fix something. The rating below stays in place until the new scan finishes. The rating also refreshes every week, so the history shows a point a week without anyone clicking. Since last scan shows what changed: the score, the factors that moved, and the findings that opened or closed.

​
Correct the estate

In Attributed Estate, dispute any host that is not yours, for example a host a supplier runs under your domain. Use Add asset for hosts the scan could not find. A dispute or an addition starts a rescan, and the rating changes when it finishes.

​
Settings

Click Settings on the page, or go to Configuration > Security Rating.
  • Your Domain is the domain your rating scans. Changing it clears the old domain’s rating and starts a scan of the new one.
  • Approved Hosting Countries are the countries your vendors may host your data in. A vendor host outside them is flagged on the vendor’s security page and added to its next steps. Leave it empty to show locations without flagging any.

​
Troubleshooting

Security intelligence guide

The same rating on a vendor, section by section.

Dark web monitoring

Leak sites, breach corpora and lookalike domains for your organization.