Security Grade
One grade for the whole estate: see where you stand today, prove where you were last quarter, and show the trend line moving the right way.
Security posture is hard to communicate. The engineers see a list of issues; the board wants a number; the auditor wants evidence of change over time. DNS Watchdog condenses your entire DNS security position into a letter grade from A to F backed by a 0-100 score - honest enough to drive engineering priorities, simple enough to put on one slide.
The score is computed, not vibes. Every open finding contributes a severity-weighted amount, and the total is normalised against the size of your estate - issue density, not raw count - so a large, largely-healthy estate is not punished for its size. Critical findings play by harsher rules: they carry a score penalty that no amount of estate size can dilute, so a single Critical issue caps your score at a D, and more than one means an F. A step-by-step breakdown in the app shows exactly how your number was built.
Because every scan snapshots the score, the grade comes with a history: the movement since the last scan, and the trend across weeks and quarters. The top issue types are ranked by how many points each is costing you, so 'what should we fix first?' has a quantified answer - and the score history shows the effect of every fix, a record you can put in front of the board, an auditor, or a customer's security questionnaire.
How it works
- ScanDaily scans across your whole estate produce the current set of open findings - the raw material of the grade.
- WeightEach open issue contributes to the score according to its severity - a Critical takeover risk weighs an order of magnitude more than a low-impact observation.
- NormaliseThe weighted total is divided across the size of your estate, measuring issue density rather than raw count - posture, not scale.
- Apply the critical floorCritical findings bypass normalisation entirely: one open Critical caps the score at 60 (a D), and two or more force an F. Estate size never dilutes a takeover risk.
- Grade and trendThe 0-100 score maps to a letter band - A at 90 and above, down to F below 60 - and every scan appends an immutable snapshot to your score history.
What you get
- Estate-wide grade computed from live scan findings
- A-F letter grade backed by a 0-100 severity-weighted, density-normalised score
- One open Critical caps the grade at D; two force an F - size never dilutes it
- Top issue types ranked by score impact, so you fix what moves the needle
- Immutable score history, snapshotted every scan, with since-last-scan movement
- Drill down from the grade to the exact issues driving it
Why it matters
A shared language for posture
Engineers, executives, and auditors can all read a B trending toward an A. The grade turns a specialist issue list into a conversation anyone can join.
Priorities backed by numbers
Score-impact ranking answers the eternal question - what should we fix first? - with the issue types actually dragging the grade down, not the ones that merely feel urgent.
Progress you can prove
The score history is a record of your programme working: where you were last quarter, what each remediation push achieved, and the trend line to show for it.
Faster security reviews
Customer questionnaires and compliance reviews ask how DNS security is managed and measured. A continuously computed grade with drill-down evidence is a better answer than a paragraph of prose.
Common questions
How is the grade actually calculated?
Every open issue contributes a severity-weighted amount to a penalty score, which is normalised against the size of your estate and subtracted from 100. Critical findings additionally carry a fixed penalty that estate size cannot dilute - one Critical caps you at a D. The score maps to letter bands (A at 90+, B at 80+, C at 70+, D at 60+, F below), and the app shows a step-by-step breakdown, so the number is never a black box.
How do I improve my grade fastest?
Clear any Critical findings first - each one caps your score regardless of everything else you fix. After that, the Top Issue Types view ranks issue types by how many points each is costing you, so you can target the classes of finding that actually move the number.
Can I use the grade with auditors and customers?
That is one of its main jobs. The grade demonstrates continuous monitoring, the history demonstrates management over time - each snapshot even records the scoring scheme it was computed under, so historical grades stay meaningful - and the drill-down provides the evidence trail for SOC 2-style reviews and security questionnaires.