01
Email authentication
SPF / DKIM / DMARC evidence or equivalent mail-domain control checks.
Run 350 · IDEA-3560 · MSP / consultant distribution
Bring evidence from scanners or manual reviews you already trust. The builder makes coverage, tested performance and open gaps explicit, then produces portable Markdown/JSON without uploading a client record to Solarc.
Transparent scoring
The rule is visible and missing tests stay in the denominator.
Portable, not trapped
Copy Markdown, download Markdown/JSON, or use the device share sheet.
No fake certification
This composes supplied evidence; it does not scan, certify or guarantee a site.
Portable working report · no hosted client record
Bring your own scanner results or manual checks. Nothing here scans a site, fetches a domain, or pretends the composite is an industry certification.
01
SPF / DKIM / DMARC evidence or equivalent mail-domain control checks.
02
Transport encryption, certificate and HTTPS configuration evidence.
03
Relevant browser security-header evidence from an external checker or manual review.
04
Domain, DNS and related control evidence appropriate to the reviewed service.
05
Published privacy/contact/cookie or equivalent baseline evidence appropriate to the site.
06
Automated or manual accessibility evidence; this scorecard does not replace a formal audit.
Composite working score
0
Grade E
Test coverage
0/6
0% covered
Tested performance
0
Among tested dimensions
Open / partial / untested
6
Review queue
Scoring rule: Pass = 100, Partial = 50, Fail = 0, Not tested = 0. All six dimensions stay in the denominator, so missing tests cannot inflate the composite by disappearing.
Custom MSP templates, branded report structure and controlled hosted-sharing can be scoped separately. Public/unlisted hosting is intentionally not added here until identity, retention and visibility controls are explicit.