GradeMyWeb scores each of the six categories on a 0-10 scale based on whether the individual checks within that category pass, partially pass, or fail. The overall letter grade is derived from the average of all six category scores, then adjusted downward by failing categories that have outsized business impact.

Grade thresholds: A (9+), B (7-8), C (5-6), D (3-4), F (below 3).

Grade caps: Any category scoring 3 or below caps the overall grade at C. Two or more such categories cap it at D. A failing email authentication check (SPF / DKIM / DMARC) also caps the grade at C, because broken email deliverability affects every outbound communication the business sends.

What we check: All checks are passive. We read publicly available DNS records, HTTP headers, and rendered HTML. Nothing on the scanned site is modified, no login is attempted, and no forms are submitted.

Limitations: JavaScript-rendered content (SPAs) may produce incomplete results for some checks. Sites with Cloudflare or other aggressive bot protection may show lower scores on some HTTP header checks than their actual configuration warrants. Where a check cannot determine the answer from passive observation, we return "unconfirmed" rather than fail.

Disclaimer: This report is generated automatically by GradeMyWeb using passive scanning of publicly available signals. Findings are heuristic, not professional advice, and may include false positives or false negatives. The service is provided "as is" without warranty of any kind, express or implied. GradeMyWeb accepts no liability for decisions or actions taken based on the contents of this report. Verify critical findings with qualified professionals (legal counsel, IT security, accounting, marketing) before acting.

Intellectual property: The report structure, scoring methodology, category definitions, grade thresholds, voice templates, and presentation format are the proprietary intellectual property of GradeMyWeb. This report may be shared with the intended recipient's team for internal use. It may not be redistributed publicly, modified, reverse-engineered, white-labelled, or incorporated into competing products or services without written permission from GradeMyWeb. Full terms: grademyweb.com/terms

Data collection: All data in this report was collected from publicly accessible DNS records, HTTP headers, and rendered HTML at the time of scan. No login was attempted, no forms were submitted, and no data on the scanned site was modified.