Is rating B a bad rating?

No — rating B is a solid result. It signals that most controls look good from the outside, with a defined list of lower-severity findings to close.

How do you move from rating B to rating A?

Work through the remaining findings shown in the score breakdown — typically low-to-medium severity items — and verify the improvement with a re-scan.

Glossary

What is the difference between security ratings A and B?

Q: What separates rating A from rating B?

Control consistency. Rating A means nearly all observable security signals are in good shape, while rating B means some low-to-medium severity findings remain unaddressed.

Rating A indicates a very strong, mature defensive posture, while rating B indicates a good posture with a few areas still to strengthen.

Part of: Free Security Rating

TL;DR

The difference between ratings A and B is control consistency: A means nearly all observable signals are in good shape; B means some low-to-medium severity findings remain.
Both are strong ratings; the gap is in the remaining findings and their severity.
The finding details show exactly what separates the two.

Short definition

The main difference between ratings A and B is control consistency: rating A means nearly all observable security signals are in good shape, while rating B means some low-to-medium severity findings remain unaddressed.

How do letter grades map to risk scores?

On the CyberRank scale, letter grades map from the aggregate risk score. Rating A generally requires strong TLS configuration, complete email security (SPF, DKIM, DMARC), few open ports, no active leaked credentials, and no exposed admin portals.

Rating B does not mean insecure — it usually takes a few targeted fixes, such as retiring old subdomains or enabling DMARC. A single letter difference often decides whether a vendor passes due diligence.

What are some practical examples?

Vendor A: modern TLS, DMARC active, no major findings → rating A.
Vendor B: mostly good, but an admin portal is still open → rating B.
In tenders, companies set a minimum rating B requirement for prospective vendors.

Learn more

Frequently asked questions

Related terms

Get your free security rating

Run a free CyberRank security rating for any organisation and see the same vendor risk signals our customers use.

Get your free security rating