A LinkedIn post from BitSight highlights an upcoming 2026 update to its security ratings algorithm, emphasizing alignment with an evolving cyber threat landscape. According to the post, the update incorporates DMARC as a new ratings factor and replaces the existing Patching Cadence metric with a Critical Vulnerability Management measure.
The post suggests that organizations which rapidly remediate their most critical vulnerabilities may see improved scores under the revised model. BitSight also indicates that the refreshed methodology is intended to provide a more complete and intuitive view of security posture while maintaining correlation with real-world breach outcomes.
For investors, the algorithm update could signal BitSight’s effort to keep its ratings framework relevant amid rising regulatory and customer scrutiny of third-party cyber risk. Enhanced emphasis on critical vulnerability management and email security standards may strengthen the perceived value of BitSight’s analytics for enterprises and insurers seeking more predictive cyber risk indicators.
If customers and partners view the updated ratings as a more accurate reflection of operational risk, BitSight could improve customer retention and expand use cases in risk management and underwriting workflows. However, the commercial impact will likely depend on how smoothly existing clients adapt to the new methodology and whether competitors introduce similar or more advanced models in response.