Maturity Score
How Advisor calculates a 0 to 100 score from the configuration of your zones, what each grade means and how to read a risk's impact.
The Maturity Score (Score de Maturidade) is a 0 to 100 score for the security posture of your Cloudflare account. The score is calculated from verifiable rules. Every point gained or lost corresponds to a setting you can check in the Cloudflare dashboard.
Grades
The numeric score maps to a letter grade:
| Grade | Range |
|---|---|
| A | 90 to 100 |
| B | 80 to 89 |
| C | 70 to 79 |
| D | 60 to 69 |
| F | below 60 |
How the score is built
- Rule: each rule checks one configuration item of a zone, for example whether HTTPS is mandatory. Each rule belongs to a pillar.
- Zone: the zone score comes from the points of the rules that apply to it.
- Account: the connection score is a weighted average of its zones. Each zone's weight is proportional to its share of the account's traffic. Zones with more requests weigh more.
Rule status
In each zone, a rule ends up in one of these statuses:
| Status | What it means |
|---|---|
| Conforme (Compliant) | The configuration meets the rule. |
| Parcial (Partial) | The configuration partly meets the rule, which earns only part of its points. |
| Não conforme (Non-compliant) | The configuration does not meet the rule. It becomes an open risk. |
| Ignorada (Ignored) | The risk was accepted and the rule no longer counts. |
| Não aplicável (Not applicable) | The rule requires a Cloudflare plan above the zone's plan. |
| Não coletado (Not collected) | The data it needs did not come in the last collection. |
A risk's impact
Every open risk shows its Impacto no score (Score impact): how many points the score gains once that rule passes. Use the impact to decide the order of fixes. The Riscos (Risks) screen and the list on Visão Geral (Overview) are sorted by it.
Accepting a risk
When a risk is known and tolerated, a user with permission can accept it with a justification and, optionally, an expiry date. The rule becomes Ignorada (Ignored) and stops counting toward the score. The acceptance can be undone at any time.