Brand Signal · Unique in the market

Risk Scoring Engine

Deterministic 0-100 scorer engine that combines 4 real signals (Levenshtein, DNS posture, WHOIS recency, visual similarity). Same inputs → same score. Zero LLMs, zero external network calls in the critical path.

Capabilities

Deterministic 0-100 score UNIQUE

Reproducible exact output: same inputs always produce the same score. Trivially deterministic tests, idempotent rescore for audit.

Factor-by-factor breakdown

Every score comes with explanation: how much Levenshtein weighed, how much WHOIS recency, how much DNS posture. "Why this score" tooltip on hover.

Per-tenant configurable weights

CISO tunes the scoring policy per industry. Banking can prioritize DNS posture; retail can prioritize Levenshtein. No code changes.

Severity buckets

0-30 low (not targeted) · 30-60 medium (worth monitoring) · 60-80 high (CISO must see) · 80+ critical (immediate take-down).

Idempotent rescore

If a candidate factor changes (registered MX, expired WHOIS), rescore reuses the same weights. Audit-trail compatible result.

Dedicated API endpoint

POST /v1/brand-signal/score with domain candidate + brand reference. Response: { score, factors[], severity, computed_at }. STIX/TAXII compatible.