« SSL Labs Distrusts WoSign and StartCom certificates | Main | SSL Labs Grading Redesign (Preview 1) »

Introducing Hardenize dashboards

June 29, 2017

Today we’re introducing a great new Hardenize feature—public dashboards. They are a great way to apply Hardenize’s complete assessment capabilities to a group of hosts and get a good understanding (quickly!) of what their security is like. We provide a summary page that shows the most important data points, but we also include the complete results for each of the participating sites individually.

We’re launching with two dashboards. The first—Global Top Sites—is maintained by us and is designed to reflect the security of the most important hosts globally. We will draw from several sources that rank web sites to build our own list of about one thousand most popular names.

The other dashboard—Sweden’s Top Sites—is far more interesting because it’s official; it’s maintained by Sweden’s domain name registry, The Internet Foundation in Sweden (iiS). We are very happy to be working with the iiS and Anne-Marie Eklund Löwinder, their CISO, to maintain this dashboard.

We like security dashboards for several reasons, the main one being that they’re easy to understand and you don’t even have to be a security professional. In other words, they visualise security and make it accessible to everyone. The other aspect of the same coin is that the transparency helps us all do better. Let’s face it, the security of an important web site is not only their problem, it’s also a problem for their users, and very often for an entire country or even the world as a whole.

To that end, we’re thrilled to announce that we will make our public dashboards free to selected organisations that are working to make Internet a safer place, for example domain name registries and government agencies in charge of security of national web sites. If you represent one of these, please get in touch. We’d love to hear from you!

Finally, please be aware that, like Hardenize itself, our dashboards are a work in progress. Over the following months we will further polish them, clarify and document our criteria, and add some additional features.

MY BOOK: If you like this blog post, you will love Bulletproof SSL and TLS. For system administrators, developers, and IT security professionals, this book provides a comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI and will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks. It's available now.