Tier 1 · scanned 2 hours ago
Smile ID
smileidentity.com · Identity checks at sign-up
0/1000Overall
58 to A828 from our scans · +14 from answers we could check
Fix requested · 1 finding · due 8 Oct
Waiting on Smile ID to fix it
When they mark it fixed in their portal, we rescan straight away. Fixed, they land at B · 854.
The grade
How their 828 is made
External · Fintech weights, as your organisation set · every point accounted for
72 points from A. Fixing everything we've listed is worth +21: closer, but not there.
0828 earned · 172 lost1000
- Open doorsAdmin panels, databases and services open to anyone18%138/180Staging site answering on the open internet−12+12 if fixed
- Keeping up to dateSoftware with known holes, versions on show16%121/160Server versions shown in API responses−9+9 if fixed
- LeaksStaff logins in breach dumps, files left public16%130/160Old staff logins seen in public breach dumps−30
- Breach historyBreaches disclosed in the last five years10%70/100Past breaches, counted for less as they age−30
- IP reputationTheir addresses on spam and malware lists8%65/80Some of their addresses on spam or abuse lists−15
- Hacker chatterMentions where attacks are planned8%65/80Named in passing where attacks are discussed−15
- EncryptionCertificates, protocols, browser protections14%139/140Nothing lost here−1
- DNS and emailSPF, DMARC, DNSSEC, records pointing nowhere10%100/100Nothing lost here