Show your score with a public page and a badge

You can show the score of a proved domain to your clients and visitors: a public page with the domain, its score and grade and the date of the last audit, and a badge to put on your site. It is off until you turn it on, and you can turn it off at any time. It never shows the findings.

Turn it on

1. Open the domain’s page and scroll to Settings, then Public score and badge.
2. Press Turn on the public score. It is available once the domain is proved by its TXT record.
3. Copy what you need: the address of the page, the badge’s HTML code, or its Markdown code (for a README, for instance).
4. Paste the badge where you want it shown. It links to the public page.

Only owners and admins can turn the public score on or off.

What visitors see

The page and the badge show the domain, its score and grade from the latest scheduled or on-demand audit (never a quick check), and the date of that audit. They never list the findings, the hosts or anything that would help an attacker. The page is not indexed by search engines.

The badge follows your audits by itself:

• it says outdated and turns grey if the audits stop, for instance when the domain is paused;
• it says how many findings you accepted as risks, since they are left out of the score;
• it turns grey within the hour once you turn the page off, or if the ownership record disappears.

Turn it off

Press Turn off in the same place. The page disappears and the badge turns grey on every site that shows it. Turning it on again later gives a new address.

If the domain loses its ownership proof (the TXT record is removed and three daily checks in a row fail), the public score is turned off on its own, so that a new owner of the domain never inherits it.