About the data

1.🌍 Overview

World Cyber Ranking by Scovery acts as a global and sectoral barometer of cyber risk exposure. It provides a synthetic cybersecurity score for millions of companies worldwide, calculated through large-scale analysis of observable internet-facing assets and vulnerabilities.

These individual scores are then aggregated by country and by industry, offering a unique lens to compare cyber resilience across regions and industries.

The dataset, monthly updated and refined, reflects the evolving cybersecurity landscape, helping organizations, analysts, and the public monitor trends, identify risk concentrations, and benchmark exposure levels globally.

The data reflects the state of cybersecurity external exposure for millions of companies worldwide.

2.📊 What is measured ?

The application provides a multi-dimensional view of global cyber exposure, based on continuous observation and monthly aggregation of billions of data points. It highlights:

Average cybersecurity scores per country and industry
Recent compromise statistics per country, showing how many companies were compromised in the last 4 months
A bar chart of average scores per industry, useful to benchmark industries
A search form to look up individual company

3.🧩 A deep & structured analysis

Scovery collects continuously at global scale open data such as passive DNS, scan of the Internet, cyber threat intelligence indicators, certificate transparency, whois IP, whois gTLD & ccTLD, web crawling, list of companies, etc.

On top of that, over 200 cybersecurity control points are monitored, spanning a wide range of technical and operational exposures. These control points are grouped into 7 key categories:

Asset reputation
Application security
Authentication
Encryption
Messaging security
Patch management
Sensitive services exposure

Each category aggregates multiple control points that contribute to a company’s cyber risk profile.

4.Graph-based infrastructure

All collected data is aggregated every month into a massive graph-based model of the Internet, built and maintained by Scovery. The average KPI of this graph database includes:

Over 8 billion digital assets (IP addresses, domains, subdomains, TLS certificates, etc.)
Over 21 billion relationships between these assets

Thanks to this global graph, each company’s digital perimeter is automatically discovered using a proprietary graph traversal algorithm, enhanced by AI driven heuristics. These intelligent mechanisms continuously adapt to identify and associate assets with the right company, even as its digital footprint evolves.

This approach ensures that the cybersecurity score reflects what is actually observed on the public Internet, making it a a strong indicator of external cyber exposure.

5.🧮 How are company scores calculated ?

Each company is assigned a cyber score ranging from 100 to 900 (with 900 being the highest) and a grade from F to A (A being the best). These ratings are determined by assessing the presence or absence of issues across a defined set of control points. The computation process follows these key steps:

Asset-Based Evaluation — Internet-facing assets are analyzed to count how many are affected by each control point
Normalization — Company size and control point comparability are factored in
Weighting by Severity — Each point is weighted by associated risk level
Compromise Penalty — Recent breaches affect the score
Rescaling — Scores are adjusted into the 100–900 range relative to other companies

6.🌐 How are country scores grouped ?

Each country displayed on the Geo cyber scores is assigned to one of six dynamic color bands, based on its average company score for the current dataset (updated monthly).

This grouping is automatically recomputed every month, to reflect changes in the distribution of scores across all countries. The scale is determined by computing the minimum and maximum observed country scores, and dividing the range into 6 equal intervals:

Countries with higher average scores appear in darker blue
Lower scores appear in lighter shades
Insufficient data countries are shown in white

The tooltip for each country provides:

The country name
Its average score
The number of companies scored in that country
The number of companies compromised in the last 4 months

This method helps viewers immediately identify regional cyber risk patterns and spot emerging trends globally.

7.📅 Update frequency

The dataset is updated monthly to reflect:

New findings from scans
Incident reports and compromise signals
Changes in scoring methodology (if applicable)

8.📌 Disclaimer

Scores are based on externally observable data and statistical models. They do not reflect internal audits or proprietary threat intelligence from companies. While they provide insight into external risk exposure, they are not an absolute indicator of internal cybersecurity maturity.

9.Want to know more?

Want to know more about Scovery and the data?