Issue Types
- Address score-impacting CVEs in your Scorecard
- Park domains properly and keep them secure
- Multiple assets shown in observations for 'SSL/TLS' issue types for a single finding
- The usage of hxxp/hxxps next to some links in Platform and API
- DNS Server Accessible
- Telephony/VoIP Device Accessible
Getting Started & Setting Up
- How to log in with a passkey for FIDO authentication
- Provision your SecurityScorecard users with SCIM
- Create API tokens for the SecurityScorecard platform
- Choose how to log into our platform
- Personalize your reports and communications with your logo
- An email already exists for a new user you are trying to add
Product Overview
- Time Zones for Timestamps on the Platform UI and APIs
- Commenting on issues on a Scorecard under Hierarchy
- Why is the Scorecard Score not updating after fixing a website?
- Why is the "Fixed" button not available for Patching Cadence issue types?
- What is a Breach Likelihood of a Scorecard with an A Grade?
- What does wildcard (*) next to a domain represent in the Digital Footprint?
Analysis Reporting
- Create your own security narrative with a Custom Report
- Track vulnerabilities and affected parties with the CVE Impact on Companies report
- Older reports missing from the Generated Reports section of the Reporting Center
- No score appears in Ransomware Analytics Report
- Automatic Vendor Detection displays no information
- Gauge likelihood of a ransomware attack with the Ransomware Analytics report
Scoring Updates
- Prepare for Scoring 3.0
- Types of Reports accepted for Evidence Based Score Gain
- A Closer Look at Scoring 3.0 Vocabulary and Breach Likelihood
- Recommended actions to improve your Scoring 3.0 score
- Evidence-based score gain
- Scoring Recalibration FAQ
Scorecard
- Understanding the concept of related domains
- Tag your Scorecards and assets for meaningful contexts
- How can the Scorecard domain ("My Scorecard") be changed?
- Unable to add a Scorecard to Portfolio
- IP/Domain status shows as Removed, but the Score is still getting Impacted
- How to search for a Scorecard using DUNS?
Third Party Risk Management
- How to Review a Questionnaire's responses Before it is fully completed?
- Providing guest access link to a questionnaire receiver
- Sending a questionnaire to your Team
- Upload a Questionnaire in Excel Format
- Automating Questionnaires
- Create a Portfolio
Best Practices
FAQ
- Findings arrive back on the scorecard after resolving via 'Fixed'
- Guest access after 2FA setup
- Why IPs (not currently attributed to the digital footprint) get listed under Observations of Findings?
- Why do new findings not automatically get added under "Action Plan"?
- New users are not automatically SAML redirected
- SecurityScorecard Support login access to your Organization