← Back to catalog

Dispute a grade

Vendors and maintainers of any listed server have a standing right of reply.

How to dispute

Open a grade-dispute issue naming the server, the grade or finding you dispute, and — if the server has changed — the release that addresses it.

What happens next

  1. First response within 14 days.
  2. The server is re-scanned against its latest release with the current engine, in the same disclosed sandbox configuration.
  3. If the grade changes, the entry is updated and the change is recorded in the public corrections log.
  4. If the grade stands, the finding-level evidence is reviewed manually; the vendor's reply is published alongside the entry either way.
  5. A grade that cannot be reproduced from the disclosed method is withdrawn, not defended.

Scope

Grades are automated opinions about a specific artifact version at a specific time (see the methodology). Disputes about the method itself are welcome through the same channel.