Score Dispute & Correction Policy

1. Scores Are Opinions

A Vysiro TrustScore, grade, or finding is our opinion, produced by a deterministic, versioned methodology from publicly observable data (DNS records, TLS handshakes, published policy files, certificate transparency logs, and registration data) at a specific point in time. It is not a statement of fact about an organization, an accusation of wrongdoing, an audit, or a certification. The full methodology is published at vysiro.com/methodology.

2. How to Dispute a Score or Finding

Anyone may dispute a score, grade, or individual finding - you do not need to be a Vysiro customer. Email Support@vysiro.com with the subject line “Dispute” and include:

• The domain concerned.
• The specific finding or score element you believe is wrong.
• Why it is wrong (for example: the record was updated, the check misread the configuration, or the observation is out of date).

3. What Happens Next

• Acknowledgement: we aim to acknowledge every dispute within 2 business days.
• Re-scan: we re-run the relevant checks against live data. Because scoring is deterministic, a configuration fix is reflected in the next scan automatically.
• Resolution: we aim to resolve disputes within 7 business days. If we were wrong, we correct the finding. While a dispute is open, the disputed item is annotated as under review.
• Methodology errors: if a dispute reveals a bug in a check, we fix the check for every domain, note it in the scoring version history, and thank you.

4. Lookalike-Domain Findings

Our brand-protection checks flag lookalike or confusable domain registrations using similarity analysis (edit distance, homoglyph confusables, TLD swaps) together with observable evidence such as registration dates and resolution status. A similarity flag is not a determination that a domain is malicious, infringing, or operated in bad faith. If your legitimate domain has been flagged as a lookalike of another domain, use the dispute process above and we will review and annotate or remove the finding.

5. Opt-Out of Public Scan Pages

Detailed scan results are private by default; public scan pages show a limited preview. If you control a domain and want it excluded from public scan pages entirely, email Support@vysiro.com with the subject “Opt-out” from an address at that domain (or provide DNS TXT verification on request). We honor verified opt-out requests and mark the page not to be indexed.

6. Our Commitments

We follow the industry Principles for Fair and Accurate Security Ratings: transparent methodology, a published dispute and correction path, annotation of disputed items until resolution, and point-in-time and data-source disclosure on scan results. See also our Scanning Transparency page for what our scanner does and does not do.