Skip to main content

Showcase your cyber-diligence on your website with Badges

Mark Glinski
  • Updated

In this article:

    You can easily post SecurityScorecard Badges on your website to show customers, partners, and prospects your commitment to maintaining a strong security posture.

    Currently available, the Seal of Trust Badge displays your engagement with SecurityScorecard and provides a link to your public Scorecard.

    The Badge includes your grade if it is A or B:

    seal-of-trust-A.png

    seal-of-trust-B.png

    If the grade is lower, it does not appear on the Badge:

    seal-of-trust-no-grade.png

    Tip: See the FAQ What happens if my score changes after I embed the Seal of Trust?.

    Embed your Badge using the SecurityScorecard platform

    You can get your Badge from your Company Profile or your Settings page. Then, you copy the code snippet for the page and paste it in your web site.

    Get to your Badge from your company profile

    1. In the Ratings platform, go to your Scorecard.
    2. On your Scorecard, select Company Profile.
    3. On your profile page, click Add your badge.

      badges-add-badge.png

    Go to your Badge from your Settings page

    1. In SecurityScorecard, click your profile avatar in the top-right corner, and select My Settings.

      platform-settings.png

    2. Select the Badges tab in the My Settings panel.

      settings-badge.png

    Copy the Badge snippet

    In the Get Seal of Trust dialog, copy the snippet.

    Tip: Expand the snippet view to see all the code.


    badges-copy.png

    Paste the snippet in your website

    Consult your website developer about how and where to paste the snippet.

    Embed your Badge using the Wordpress plugin

    You also can use the SecurityScorecard Wordpress plugin to quickly and easily add the Seal of Trust anywhere on your website.

    First, install the plugin directly from the Wordpress Plugin Directory.

    Then use one of the following two methods to embedding your Badge of Trust. 

    Use a Wordpress Shortcode

    Use the shortcode `[ssc-badge]` to include it anywhere on your site where shortcodes are supported. You can manually set the domain if your Scorecard domain is different than your Wordpress site domain. Use the domain attribute as in the following screenshot. You can also hide the link under the Badge by including an additional parameter “hide_attribution” and setting it to the value “1”.

    badges-wp-shortcode.png


    Use a Wordpress widget

    Alternatively, install a widget provided by the Wordpress plugin anywhere on your website. Simply drag the widget where you want the badge to appear.

    FAQ

    Why should I add my Badge to my website?

    With Badges you can demonstrate that your are actively monitoring your security posture with a trusted leader in cybersecurity risk ratings. Your partners and prospects can easily see a snapshot of your security health by clicking the Badge. 

    Where does the Badge link to?

    Embedded Badges link to your corresponding Public Scorecard.

    What happens if my score changes after I embed the Seal of Trust?

    Your Seal of Trust dynamically adjusts to score changes. If your score drops below B for any reason, it is then concealed. If your score increases to B or A from a lower score, it is then displayed.

    Tip: Learn how to:

    Will an embedded Badge slow down the loading of my site page?

    Badges are loaded in inline frames (iframes) and do not impact page loading times.

    My Badge is not appearing on my site. What should I do?

    Many sites only accept content from trusted sources using an HTTP header called a Content Security Policy (CSP). While this is a recommended security feature to enable for your website, it will also block your Badge from appearing unless you allow content from SecurityScorecard.
     
    To do so, just add securityscorecard.com to your site's frame-src directive (Learn more). Don't worry, SecurityScorecard diligently maintains an A rating!
     
    Additionally, SecurityScorecard verifies that the badge you have embedded matches the website where it is embedded. This prevents other sites from taking advantage of your good score. Make sure that the URL where you are embedding the badge matches the domain in the code snippet. For example, if your domain is my-business-site.com the domain in the snippet should appear as follows:
     
    <iframe src="https://securityscorecard.com/security-rating/badge/my-business-site.com"
    width="256"
    height="100"
    frameBorder="0"
  >
  </iframe>

    Otherwise, the badge will appear as blank space.

    Related articles