Specialist assessment
Analysts with blockchain and traditional security backgrounds score each control. We do not buy products to inflate a grade. Marketing materials are not evidence.
The rating house
ExRanks is an independent exchange security rating house. Behind it is a professional security and compliance team: blockchain-industry specialists who also work in classical application, identity, and infrastructure security. We combine that expertise with AI-assisted observation, watch venues around the clock, and restate the public ranking each quarter.
Operating cadence
Who we are
ExRanks ratings are issued by a dedicated team of security specialists. The analysts who score venues work at the intersection of blockchain security and classical information security: identity and access control, application and API security, data protection, edge and infrastructure, and the operational controls on the funds path. Assessment is expert-led. Evidence must be verifiable. Results must be reproducible.
A crypto exchange is both a trading institution and an internet platform. Incidents fail at controls — not at volume or brand. We therefore do not rank by size, visibility, or commercially acquired attestations. Scores cover only what can be independently observed on the website, in the APIs, and on public supervisory registers. Licenses and certifications are filed in a separate dossier and do not enter the weighted composite. A marketing claim cannot rewrite a grade.
How we work
Analysts with blockchain and traditional security backgrounds score each control. We do not buy products to inflate a grade. Marketing materials are not evidence.
AI assists continuous monitoring. It flags regressions, configuration drift, and public-register changes at all hours. It does not replace the analyst who decides whether a control still holds.
Observation runs through the quarter. The public ranking is restated on a quarterly cycle under WSCS 1.0, with a reproducible trail from composite to control.
License dossiers record only filings we can match to a supervisor’s register. Headquarters is not a licensed jurisdiction. An omission is not a finding that nothing exists.
What we publish
Each quarter we publish a scored sample, control-level detail, and a license dossier for every name in the set. Domain scores are independent, then weighted. The dossier sits beside the composite; it does not overwrite it. Anyone can retrace a grade to a rule.
What we are not
ExRanks is not an investment adviser and not a supervisor. A higher grade is not a recommendation to deposit funds. A lower grade is not a call to exit. We observe, score, and file what we can independently verify.