custom white shadow vectorcustom white shadow vectorcustom vectorcustom vectorcustom vector

‍

VerifiedThreat is an AI-driven threat and vulnerability platform originally designed for governments and sovereign nations. It simulates state-sponsored red team attacks on critical infrastructure, national security assets, and enterprise systems. The VerifiedThreat Index (VTI) is an evaluation tool designed to measure the overall vulnerability level to external cybersecurity threats within the corporate sectors.

‍

What do the results actually mean?

"There is no such thing as 99% security"
Companies with a comprehensive perimeter Zero Trust policy should be gaining 100%. The VTI assessement is designed so that a robust perimeter defence will block the incoming tests. Many companies in the Index have achieved a perfect score.
Excellent
100
Companies should be aiming for a perfect score. The tests don’t have deliberate “gotcha’s” to force poor scores, but instead simulate common attack methods that are widely used by attackers today, and we’d expect the best performing sites to attain a perfect score. Many sites do and we call out the best performers in each sector.
Very Good
80-99
Although a small performance gap has been identified, the site nevertheless has significant edge protection that is effective in the vast majority of cases. Robust and demonstrable edge protection is in place, which often leads to attackers searching for easier targets.
Par Score
65-79
A par performance introduces some meaningful  exposure to vulnerabilities. Although clearly not optimal, this category does have largely performing edge protection activated, which may be enough to protect it from more serious attacks.
Sub-Par
40-64
Security gaps, and failing the majority of the tests means your security is poor, and falls significantly below the best performers.The risks are starting to escalate at this level of poor performance, and life is made significantly easier for the outside-in external attackers.
Inadequate
11-39
Major gaps, and failing the majority of the tests means your security is inadequate. Often in security, you don’t have to be the very best, but you do have to be better than your closest neighbour. These sites will inevitably become a focus for attackers, who are encouraged by the lack of robust protection, to launch further sophisticated attacks, knowing the defence is weak.
Critical
0-10
Little or no protections in place. It’s the real-world equivalent of leaving the keys in the ignition. This critical category sees a disproportionate increase in major follow-up attacks.