What is it?
A score (on the Dashboard) that describes your overall security posture, specifically how well your team are remediating vulnerabilities within a given timeframe. The default are based on industry best practices:
Severity | Aim | Maximum score if issues of this severity rating are overdue |
Critical | 7 days | F |
High | 30 days | C |
Medium | 60 days | B |
Low | 120 days | A |
But users of our Pro and Premium plans have the ability to customise these (to align with their own unique goals):
Example
As you can see below, the default goals were too strict for this small team, so they adjusted them to bring them in line with their internal security policies (though we still flag what Intruder's score would have been, so you have an industry benchmark).
Default score | Customized score |
 |  |
How do I change the cyber hygiene goals?
Head to Settings > Team account > adjust the rating to something that suits your company's security policies and it will save automatically:
How do I improve the cyber hygiene score?
Resolve any overdue issues and it will improve, focusing on the critical first as they're the most important and have the shortest remediation window.
Do snoozed issues count towards my cyber hygiene score?
No, they don't. Snoozed issues / occurrences are removed from the portal dashboard (including from the cyber hygiene score).
Critical overdue - Maximum cyber hygiene score = F
High overdue - Maximum cyber hygiene score = C
Medium overdue - Maximum cyber hygiene score - B
No issues overdue A+