> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coverbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Your security rating

> Rate your own organization from the outside, the way your customers' rating tools see it, and fix what lowers the score before they ask.

For AI agents: a documentation index is available at [https://docs.coverbase.com/llms.txt](https://docs.coverbase.com/llms.txt). This page is also available in markdown by appending .md to the URL.

> [!NOTE]
>
> This guide is part of the [User Guides](https://docs.coverbase.com/user-guides/overview.md) collection. For the same rating on a vendor, see the [Security intelligence guide](https://docs.coverbase.com/user-guides/security-intelligence.md).

**Security Rating** runs the outside-in scan Coverbase uses on your vendors against your own domain. You see the score, the findings behind it, and what to fix first. The mistake people most often make is scanning a marketing domain instead of the domain their customers actually use, so check the domain before your first scan.

## Finding it

Click **Security Rating** in the left navigation. You need permission to view organization settings. Starting a scan and changing settings need permission to edit them.

## Start the first scan

The first time you open the page, enter your primary domain and click **Start scan**. The field is filled in from your organization's website. Subdomains are found automatically, so enter the main domain only.

The scan reads public records and makes ordinary connections to your websites, the same as it does for a vendor. It usually finishes in about two minutes. The page updates on its own.

## Read your rating

The page is the same as a vendor's security page, with three differences:

* **Next steps** says how to fix each item, instead of what to ask a vendor.
* There is no industry comparison, related domains or certifications section.
* **Hosting Locations** shows where your hosts are, without flagging them against your approved countries. Those countries apply to your vendors.

Read [Breach and ransomware risk](https://docs.coverbase.com/user-guides/security-intelligence.md#breach-and-ransomware-risk) and [How much to trust the rating](https://docs.coverbase.com/user-guides/security-intelligence.md#how-much-to-trust-the-rating) for what the indicators and the confidence chip mean.

## Rescan after a fix

Click **Rescan now** after you fix something. The rating below stays in place until the new scan finishes. The rating also refreshes every week, so the history shows a point a week without anyone clicking.

**Since last scan** shows what changed: the score, the factors that moved, and the findings that opened or closed.

## Correct the estate

In **Attributed Estate**, dispute any host that is not yours, for example a host a supplier runs under your domain. Use **Add asset** for hosts the scan could not find. A dispute or an addition starts a rescan, and the rating changes when it finishes.

## Settings

Click **Settings** on the page, or go to **Configuration** > **Security Rating**.

* **Your Domain** is the domain your rating scans. Changing it clears the old domain's rating and starts a scan of the new one.
* **Approved Hosting Countries** are the countries your vendors may host your data in. A vendor host outside them is flagged on the vendor's security page and added to its next steps. Leave it empty to show locations without flagging any.

## Troubleshooting

| Symptom | Fix |
| - | - |
| Security Rating is missing from the left navigation | You do not have permission to view organization settings. Ask an administrator. |
| The page asks an administrator to set the domain | You can view the rating but not start a scan. An administrator starts the first one. |
| The scan says it could not finish | The domain did not answer, or a source failed. The previous rating stays in place. Click **Rescan now** to try again. |
| The rating describes the wrong domain | Change **Your Domain** under **Configuration** > **Security Rating**. |
| A factor reads not measured | That source did not run. Shodan, Censys and Have I Been Pwned need your organization's own keys under **Configuration** > **External Integrations**. |

## Related

> **[Security intelligence guide](https://docs.coverbase.com/user-guides/security-intelligence.md)**
>
> The same rating on a vendor, section by section.

> **[Dark web monitoring](https://docs.coverbase.com/user-guides/dark-web-monitoring.md)**
>
> Leak sites, breach corpora and lookalike domains for your organization.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.