Where the security score comes from
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
25 39 left unknown, 3 not applicable
Completeness
37% the share the model could weigh
Citations
43 across 14 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
B weighs 0.85 · 43 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
No audit. No search of iTop's own site or of independent coverage turned up a penetration test or no-logs audit by any firm conducted on iTop VPN; V01-V15 stay unknown rather than no, since an absence found by searching is not the same as a document stating one has never happened.
No transparency report or warrant canary. The site's own sitemap carries neither page, which is the basis for P05/P07 = none, but that still leaves the record of handing data over, court orders and seizures (P01-P03, P11) completely undocumented rather than cleared, since iTop publishes nothing that would clear them.
the rest of what is open — 73 more words
Mandate-country hosting unresolved. The server list includes Russia, Turkey, India, Kazakhstan, the UAE and Vietnam, all under a logging mandate, and nothing on the site states whether those exits are physical hardware or virtual, routed from elsewhere (C09b_mandate_hosting).
Hygiene internals undocumented. RAM-only servers, server hardware ownership, DNS handling inside the tunnel, and anonymous payment options are not described anywhere found on the site; the privacy policy covers data categories collected, not server infrastructure.
On the record as a whole.
The EULA names the contracting party as "Orange View Limited d/b/a iTop", governed by Hong Kong law; the public "About" page never names this entity and presents the brand only as "iTop". Both documents agree on Hong Kong as the jurisdiction.
U07_protocols reflects only what iTop's own Windows spec page and its own blog post state the apps offer: OpenVPN (TCP/UDP) plus an HTTPS-disguised transport; no dedicated protocol-selection or manual-setup page was found, and WireGuard/IKEv2, discussed on the blog only in generic comparison posts, are not stated as offered by iTop's own apps.
IgnoranceHow much of this did nobody establish?5 fields read · 2 left unknown · 1 not applicable · 56.7 points of pressure×0.433
Priced from what is missing: 0.37 of the weighted record is established, on a slope of 0.9 under a cap of 0.6, with a posture of 0.0 relieved by 0.4.
Record completenessS08_completeness
37%
derived from the record itself
Warrant canary disciplinealso read by disclosureP07_warrant_canary
Computed
×0.093 of a clean record completeness 37%
Where the drop comes from: Ignorance. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.433, and its bar above is filled to that.
Exposure is recorded as high and the integrity status as unexamined.
Against the rest of the register, this record sits furthest above on Jurisdiction — ×0.902 where the register averages ×0.680 — and furthest below on Ignorance, ×0.433 against ×0.662.
Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
