How scores work
Each tool page grades one protocol on a 0 to 100 scale. The same bands are used on every page, on the domains list and on the dashboard overview, so a domain cannot read "A" in one place and "Needs attention" in another.
The bands
| Score | Grade | Status |
|---|---|---|
| 95 to 100 | A+ | Healthy |
| 90 to 94 | A | Healthy |
| 75 to 89 | B | Needs attention |
| 50 to 74 | C | Needs attention |
| 25 to 49 | D | Critical |
| 0 to 24 | F | Critical |
"—" is not an F
A dash means there is nothing to grade yet:
- Not set up. No record in DNS and nothing hosted. The page shows "Not set up" and the steps to set it up. A tool you have not started is not a failing tool.
- Not measured yet. For example, DMARC before the first report arrives: a domain that has sent no mail has not earned a grade.
A failed check is an error, not a grade
If the dashboard cannot load your data, the page says "We could not load …" and offers Try again. It shows no score, because nothing on the page was measured. That is a problem reaching your data, not a finding about your domain.
Not live in DNS yet
Turning a hosted tool on in the dashboard and pointing your DNS at it are two different facts. A tool is graded on what your DNS actually serves, so a tool you enabled but have not added the CNAME for is shown as not live yet, not as a pass.