Telivy Grading Criteria

Final Score

Each security section is divided into 1 or more subsections. Each subsection has a grade and a weight for the final section grade. The final grade will then be determined as follows:Final Score = Sum(Section Weight X Section Score)/Sum(Section Weight)Section score is on a scale from 1 to 4 with 1 being most secure and 4 being least secure. Once the final score is determined, the conversion to a grade score is calculated as follows:

Final Score Range	Grade
4	F
3 - 4	D
2 - 3	C
1 - 2	B

Network security consists of the following subsections:

Internal Vulnerabilities
External Vulnerabilities
Open Ports
Certificate Security
HTTPS security

Internal Vulnerability

Internal Vulnerability grades will be determined as follows:

Criteria	Grade
>10% of users have at least 1 critical vulnerability	4

External Vulnerability

External Vulnerability grades will be determined as follows:

Criteria	Grade
Any High Severity findings	4
Any Medium Severity findings	3
Only Low Severity findings	2
No findings	1

Open Ports

Open Ports grades will be determined as follows:

Criteria	Grade
Any High Severity open ports	4
Any Medium Severity open ports	3
Only Low Severity open ports	2
No open ports	1

Certificates

Certificate grades will be determined as follows:

Criteria	Grade
Any High Severity certificate findings	4
Any Medium Severity certificate findings	3
Only Low Severity certificate findings	2
No certificate findings	1

HTTPS findings

HTTPS grades will be determined as follows:

Criteria	Grade
HTTPS not enabled	3
HTTPS enabled	1

Weights for Network Security

Internal Vulnerabilities: 10 External Vulnerabilities: 8 Port Scans: 6 Certificate: 4 HTTPS: 8

Data Security

Data Security grades will be determined as follows:

Criteria	Grade
At Least 1 user with data value >= $100,000 (OR) Total risk >=$ 1,000,000	D
Total risk > $100,000 and less than$ 1,000,000	C
Total risk > $10,000 and less than$ 100,000	B
Total risk <$10,000	A

Dark Web Security

Dark Web grades will be determined as follows:

Criteria	Grade
Dark Web findings in the last 2 years	D
Dark Web findings only prior to last 2 years but newer than 5 years	C
Dark Web findings prior to 5 years	B
No Dark Web findings	A

Password Security

Password security grades will be determined as follows:

Criteria	Grade
High number of weak and compromised passwords found	D
Weak and compromised passwords found	C
Few weak or compromised passwords found	B
No Weak or Compromised passwords were found	A

Getting Started

Learning Center

Products

Frequently Asked Questions

Scoring

Integrations

Additional Information

Telivy Grading Criteria