THE QUESTION THIS NOTE ANSWERS

Is SCOUTz a security score?

No. SCOUTz preserves source-labeled findings, timestamps, coverage, limits, and unknowns so an MSP can ask the next useful question. It does not reduce an account to a single grade.

What we read / what we never read

Public-domain evidence and customer-approved, read-only tenant evidence have different boundaries. No message bodies, files, chats, documents or prompts. Public availability is not blanket legal clearance; confirm scope and obtain qualified advice.

Read the evidence, its limitations and the next question to confirm. This article brief is not an assessment result.

EXPLANATORY DIAGRAM · EVIDENCE AND LIMITS

Unread is never counted as clean.

01

Observed evidence

The source was read: retain its result, scope and date.

02

Customer-confirmed

Record the customer’s explanation and who confirmed it.

03

Gap

State the condition requiring investigation or an authorized change.

04

Not assessed / Not read

Keep missing access, unavailable collectors and untested conditions visible.

Evidence attributes can coexist; they are not a readiness score or mutually exclusive organizational verdict. A breach-record match does not by itself prove current compromise.
Is SCOUTz a security score?

No. SCOUTz preserves source-labeled findings, timestamps, coverage, limits, and unknowns so an MSP can ask the next useful question. It does not reduce an account to a single grade.

A score tells you a number. It does not tell you what to say next.

SecurityScorecard, Bitsight, UpGuard, and CyCognito serve enterprise teams that need to review many third parties or discover exposed assets at scale. Ratings, portfolio views, questionnaires, and attack-surface discovery are useful for those jobs. That is not the job SCOUTz does.

A rating helps sort a portfolio

Enterprise vendor-risk teams may track hundreds or thousands of organizations. A rating helps them sort, flag, and escalate. UpGuard also supports vendor questionnaires. CyCognito emphasizes external attack-surface discovery. Each product should be judged against the work it is built to perform.

An MSP needs evidence it can explain

An MSP sitting across from one prospect needs to know what was observed, where it came from, when it was seen, and what question the evidence supports. A letter grade is difficult to use in a first meeting. “DMARC was observed in monitoring mode on this date” creates a specific, responsible question.

SCOUTz keeps the source, timestamp, coverage, and limits attached to the observation. An unavailable source remains unknown. The platform does not turn that unknown into a passing result to make the summary cleaner.

The buyer and the decision are different

A rating platform helps an enterprise team manage third-party risk across a portfolio. SCOUTz helps an MSP prepare an account-specific conversation, earn permission for a deeper review, define the work, and verify an observable change.

Last reviewed September 12, 2026.

Run a public score →

See the evidence model →