Show the path behind every score.

How a run works

1. Findings

   Passive observation of your internet-facing estate — services, sign-in pages, DNS, certificates, leaked credentials — plus active checks where you have authorized them. Each finding keeps its source, timestamp, and affected asset.

2. Paths

   Findings are chained by attack technique, from an entry point to an impact. SCARP sees from outside: a hop behind your perimeter is inferred from what was observed, and the report labels it inferred.

3. Changes

   Findings that sit on many routes are choke points. Changes are ranked by how many routes each one is expected to cut, with severity and exploitability as inputs, so one fix at a shared hop can outrank a worse finding on a single route.

4. Re-check

   After your team ships a change, SCARP scans again. Projected, verified, and still-open routes are reported as three numbers, and a route that is still open stays on the report.

The exposure score

Every assessment also produces a 0–1000 score with a letter grade across eleven categories, for trend lines and reporting. It does not set fix order. The scorecard below is illustrative: move the slider to see how grade and tier bands map to the score.