Website Security & Compliance Standard

WSCS 1.0

An exchange ranking is not a volume table. ExRanks splits each venue into eight security domains and 33 control rules. Controls are scored first, summed inside the domain, then weighted to 100. The standard is informed by OWASP, NIST CSF, and ISO 27001 — but only verifiable website and trading-business controls receive points.

See the 30-venue ranking

Scoring path

  1. 01Score each control independently. No product purchases. No marketing materials.
  2. 02Sum inside the domain, normalise to 100, and keep the eight-domain profile.
  3. 03Apply domain weights, then map the composite to grades from AAA to CC.

Scale

Grade scale

AAA90+
AA85+
A80+
BBB75+
BB70+
B65+
CCC60+
CC<60

Buying a security product scores nothing. Only independently verifiable controls score.

Domains

Eight scoring domains