Skip to main content

Using Passfort

Assess website content risk

You can run the Website content check to evaluate website content for potential risk, for example, signs of malware or phishing, prohibited phrases, or no company address.

This check is run with G2 KYC Automation API as the data provider.

Run the check

  1. Go to a profile's Assess website content risk task.

    Assess website content risk task showing no checks have been run.
  2. Select Website content check. The check results are displayed on the task.

    Assess website content risk task showing results from the website content check.

You may find that the check results are already displayed on the task. If so, this is because your smart policy is configured to run the check automatically or another user has already run the check.

Reading the results

How the check works

When this check is run, G2 KYC Automation API scans the website content to look for any potential signs of risk.

This data provider returns a compass score, which is used to measure the risk. The greater the score, the higher the risk. Additionally, the data provider returns messages about the website's risk.

The check result is based on whether the compass score is lower or higher than the threshold set in the configuration and whether the data provider has returned any critical or warning messages.

See which details were used to run the check

The details which were sent to the data provider are displayed under Information used to run this check.

Information used to run the website content check.

Get the overall result of the check and the full site scan report

The overall result provides a high-level understanding of whether the website content is considered risky.

Website content check result showing a 'refer' message.

The overall result can be:

  • Pass: The website content risk is below your threshold.

  • Refer: The website content may be risky and should be reviewed by an analyst.

The overall result determines whether the check is Passed or Refer.

Website content check header showing refer notification.

A full site scan report provides a summary of the data provider's findings. You can use this to help determine whether to pass the task if the overall result is Refer.

To see the full site scan report, select View full site scan report.

The full site scan report is stored in the profile's Files area, which means you can also see it by going to Profile data > Files and selecting the name of the report.

See the compass score and reasons

The compass score indicates the website's risk.

It's a number from 0 to 1000, where:

  • 1 indicates low risk.

  • 1000 indicates high risk.

  • 0 is returned when there are no strong indicators of positive or negative risk.

The compass score is displayed after the overall result, along with any reasons for the score.

Website content check compass score section.

If the compass score is above the threshold set in the data provider configuration, the overall result is Refer.

If the compass score is at or below the threshold, the overall result may be Pass. However, the overall result is also affected by the risk messages.

If the compass score is zero, you'll see a message that says, "Insufficient information." The data provider configuration determines whether this will cause the overall result to be Refer.

To learn more about your configuration, speak to your Passfort administrator.

See the risk messages

If the data provider has returned any messages about the website content, you can see them by clicking the associated message tabs:

  • Critical

  • Warning

  • Ok

  • Info

Website content check info section with Critical messages tab open.

If any critical or warning messages are returned, the overall result is Refer.

If no critical or warning messages are returned, the overall result may be Pass. However, the overall result is also affected by the compass score.

The messages may not contribute to the compass score. Speak to your G2 account manager to learn more.