Score Display
Grade Thresholds
Scoring Factors
The risk score is derived from the severity and quantity of findings across all scanners. Each finding contributes penalty points based on its severity:
Points are summed and the total becomes the raw risk score (higher = more risk). The score is clamped to the 0—100 range.
Deduplication
When multiple findings share the same ID (e.g., the same rule triggered on different inputs), only the highest-severity instance is counted. This prevents score inflation from duplicate detections.Context Multiplier
The raw score is adjusted by a context multiplier that reflects environmental signals:
The final score is
min(100, round(rawScore * contextMultiplier)).
Example Calculation
With a neutral context multiplier (1.0), the risk score is 65 (Grade: C).
Risk Level Overrides
The presence of a CRITICAL finding forces at least a HIGH risk level, regardless of the numeric score. If the context multiplier is very low (< 0.6), the override is weakened to MEDIUM instead of HIGH.Score Categories
Beyond the single number, the score is contextualized across 10 categories:Improving Your Score
1
Fix CRITICAL findings first
Each critical finding costs 25 points. Resolving just one can move your grade up a full letter.
2
Address HIGH findings
High-severity items are the next priority at 15 points each.
3
Review MEDIUM findings
These are typically configuration improvements that accumulate.
4
Re-scan to verify
Run
panguard scan again after making changes to confirm your new score.