Settings and Personalisation
The Settings tab on Security posture is where you tell Hunto which domains to rate and how much each part of your security score should count. Changes here apply to your Security score only. Your Standard rating always uses the published methodology as it is, so it stays comparable.
Only an organisation admin can change settings. Everyone else sees them read-only with the notice "Only an organisation admin can change these settings."
Note: earlier versions had separate Modules, Formulas, Rules and Configure tabs. They are gone. Old links to them open Settings.
Rated domains
Rated domains lists every root domain the standard rating covers. Most come from your organisation profile, your website and your declared domain assets. Each row is marked "From your profile or assets" or "Added here".
To add a root domain:
- Type it in Add a root domain (for example example.com).
- Select Add. It shows "Added, not saved" until you save.
- Select Save settings.
Select Remove to take off a domain you added. Domains that come from your profile or assets cannot be removed here.
A new domain gets an Outside-in rating run (10 credits) if Rate new root domains automatically is on. Otherwise it shows "Not rated" with a Rate now button on its page. See Domain rating, run rating and Rate now.
Module weights
Module weights is a multiplier on all the sections of a module. Each slider shows its allowed range, and a tick marks the standard value.
| Row | Standard | Allowed |
|---|---|---|
| Standard sections | 1 | 0 to 2 |
| Brand Protection | 1 | 0 to 2 |
| Human Risk | 1 | 0 to 2 |
| Compliance | 1 | 0 to 2 |
A module that is not in your plan shows "Not in your plan" instead of a slider.
Tip: a weight of 0 removes a module from the score without disabling the module.
Section weights
Section weights tunes one section within its module. The allowed range is 0.5 to 2 times the standard weight. Under each name you see "Standard weight N, now M". The effective weight is:
standard weight × section multiplier × module weight
Example: Network exposure is worth 15. Set its multiplier to 1.5 and the module weight stays 1, and it becomes 22.5. The other sections' shares shrink accordingly, because the grade is a weighted average of measured sections.
Note: Hunto refuses a value outside the allowed range. It does not quietly adjust it.
Asset criticality
Switch Use asset criticality on to weigh findings on critical assets more: high 1.5, medium 1, low 0.7 times their normal weight. Set each asset's criticality in All Assets. It is on by default.
Save, discard and recompute
Changes stay as "Unsaved changes" until you select Save settings. Discard returns to what was saved. After saving you see "Saved. The security score was recomputed." A new point appears in History, and the explanation shows each change as its own line in the gap from the standard rating.
Sharing and automatic rating
The same tab holds Sharing and automatic rating and Verified domains. Each switch saves at once. See Sharing, vendor view and domain verification.
Before you change weights
- The standard rating does not move, so you keep a comparable number.
- Down-weighting a section hides risk from your own score. Record why, and revisit the choice.
- Compare the two scores on Rating after saving. The personalisation lines add up exactly to the difference.
- Report the standard rating when you compare yourself with others.
Use cases and wiring tips
- Focus a programme: weight Leaked credentials 1.5 while you run a credential clean-up. Reset it after.
- Company-specific priorities: a business with no public web presence may weight Web security headers down, and say so in its report.
- Keep criticality honest: mark the systems that run the business as high. Scores then fall when a critical asset has an issue, which pulls it to the top of the Action plan.
- Modules you do not use: set the module weight to 0, or leave it as it is. Sections with no data are Not measured and are left out anyway.