Understanding Your Security Grade
How LemWatch calculates your overall security grade.
Understanding Your Security Grade
What's Included
Your security grade is a composite of:
- Security headers — Presence and configuration of HTTP security headers
- SSL/TLS — Certificate validity, protocol version, chain integrity
- Mixed content — Whether HTTPS pages load any HTTP resources
- Malware scanning — Checks against Google Safe Browsing and URLhaus databases
- Cookie compliance — Consent banner detection and tracking script analysis
- Exposed services — Open ports and known vulnerabilities (via Shodan data)
Grade Scale
- A+ — Exceptional. All security measures in place
- A — Excellent. Minor improvements possible
- B — Good. A few missing headers or minor issues
- C — Fair. Some important security measures missing
- D — Poor. Multiple security gaps
- F — Critical. Major vulnerabilities detected
Improving Your Grade
LemWatch provides specific, actionable recommendations for each issue found. Issues are tagged with:
- Impact level — How much fixing this will improve your grade
- Difficulty — Easy, Medium, or Hard to implement
- Team — Who should fix it (SEO, Dev, DevOps)