Free security score tool · security-score-v3
See what incomplete security coverage does to a score
Free calculator using BoringSec security-score-v3 weights, coverage rules and caps. It shows a provisional range instead of inventing a clean score.
This calculator returns a provisional interval, never a made-up official score. It collects no domain, evidence or private answer.
Production scoring rules used by this calculator
Verified weight only
Production scores use a weighted average over verified categories.
85% coverage threshold
Lower verified weighted coverage keeps the production score provisional.
10% category rule
One missing category at or above this weight is a material confidence gap.
Critical cap 30
Confirmed critical or malicious reputation evidence caps the final score.
Evidence inputs
Build a defensible score interval
For each surface, choose the score band supported by evidence you already have. If every named module was not assessed, leave it as Not verified. Unknown weight stays unknown from 0 to 100.
Read the interval correctly
Unknown coverage is uncertainty, not a clean pass.
The low end assumes unverified weighted categories perform poorly. The high end assumes they perform perfectly. Neither end is a finding.
A narrow interval still is not official because the selections are self-reported. BoringSec only creates a Security Score from persisted scanner evidence and marks insufficient coverage as provisional.
Confirmed critical findings and malicious reputation evidence can lower the maximum even when the weighted average is higher.
Need a launch plan first?
Use the AI App Security Launch Checklist to map stack-specific tasks to the scanners that can verify them.
Open the launch checklist