Question 1

What compliance frameworks does CyberTrustScore map to?

Accepted Answer

CyberTrustScore maps every finding to four major compliance frameworks: NIST Cybersecurity Framework (CSF), SOC 2 Trust Services Criteria, ISO 27001 Annex A controls, and CIS Controls v8. Each scan category (email security, web security, SSL/TLS, breach exposure, network exposure, and privacy) includes specific control references for audit-ready reporting.

Question 2

How is the CyberTrustScore calculated?

Accepted Answer

The CyberTrustScore is a weighted composite score from 0 to 100 across six security categories: Email Security (20%), Web Security (20%), SSL/TLS (15%), Breach Exposure (15%), Network Exposure (15%), and Privacy & Compliance (15%). Each category is assessed using real-time external scanning and produces an individual score that contributes to the overall grade.

Question 3

Is the CyberTrustScore scan free?

Accepted Answer

Yes. You can scan any public domain for free and see your CyberTrustScore, category breakdown, and compliance mappings. A detailed PDF report with remediation recommendations is available after providing your contact information.

Question 4

What does the scan check?

Accepted Answer

The scanner checks six areas: Email Security (SPF, DKIM, DMARC configuration), Web Security (HTTP security headers, WAF detection), SSL/TLS (certificate validity, protocol version, cipher strength), Breach Exposure (Have I Been Pwned database lookup), Network Intelligence (open ports, Shodan findings, IP reputation), and Privacy & Compliance (privacy policy detection, GDPR/CCPA indicators).