Board of Cyber - Security Rating, AD Rating, TrustHQ
Building an ecosystem of trust
Security Rating® by Board of Cyber is a SaaS solution for assessing an organization’s security posture. It is based on an automated, non-intrusive analysis of the organization’s assets, as well as questionnaires on cyber needs and maturity. It operates on a continuous or one-shot basis, and generates recommendations for improvement using single or multi-company dashboards.
AD Rating® is a 100% automated SaaS solution for continuously assessing the security level of an organization’s Active Directory. The solution provides an overview of the risks of AD compromise and provides recommendations for improving an organization’s cyber performance. A poorly secured Active Directory domain is a prime target for cybercriminals. The assessment enables you to reduce this risk by implementing the necessary security measures.
Designed by CISOs for CISOs, TrustHQ® is a SaaS solution for organizations of all sizes to centralize knowledge and processes. The solution is designed to help organizations understand their security posture: from security standards to risk reduction and project planning, TrustHQ® contains all the functionalities essential to CISOs.






- Access your rating by area of analysis.
- View your rating history day by day.
- View company ratings and key criteria.
- Evaluate how your company compares with all rated companies in the same sector.
The benchmark shows the minimum rating, the maximum rating and the sector average.

- Download the summary report including the overall assessment, the dashboard, and the analysis by domain to evaluate the cyber risk with your board.
- Download the detailed report with observables, recommendations, and criticality level to help your ISS team improve its cyber performance.

- View the number of assets assessed and those at risk for each area of analysis.
- Use a color-coded dashboard to quickly determine the current status and priorities.
- Access the criticality level indicated for each problem identified.
- Zoom in on areas for improvement by selecting either a view by asset at risk or by control point.
- Discover the asset concerned, its level of severity, the explanation of the problem and the recommendation.
- Download detailed report to share observables with remediation team.
- Analyze your patching reactivity for each severity level, to ensure you comply with best practices (e.g. less than 5 days for critical vulnerabilities).
- Identify the most exposed URLs to improve your organization’s security and plan actions.