Earthshaker Security Book a scan
AIE Code Summit · San Francisco · Nov 10–12, 2026

External security posture, ranked.

Fifty-six sponsors scored on what the public internet can actually see of them — email anti-spoofing, web transport security, and security headers. Passive only: public DNS, public TLS handshakes, public HTTP headers. Nothing was touched, nothing was attacked.

56 sponsors Passive external assessment Scored 2026-11-10

No sponsor matches "".

#SponsorTierScoreGrade
1 Baseten Supporting 100 A
2 Monaco Supporting 100 A
3 ZoomInfo Supporting 100 A
4 CodeRabbit Gold 100 A
5 Cloudflare Silver 100 A
6 Sonar Platinum 100 A
7 Reflection Supporting 100 A
8 Unblocked Gold 100 A
9 E2B Supporting 95 A
10 Ramp Supporting 95 A
11 X Supporting 95 A
12 Databricks Platinum 95 A
13 Exa Platinum 95 A
14 Render Gold 95 A
15 Datadog Silver 95 A
16 Gmail (Google) Supporting 95 A
17 OpenAI Lounge 90 A
18 dbt Labs Supporting 90 A
19 Glean Supporting 90 A
20 Atlassian Gold 90 A
21 Google DeepMind Presenting 90 A
22 Firecrawl Supporting 89 B
23 Auth0 Gold 87 B
24 Vercel Supporting 84 B
25 HumanLayer Supporting 84 B
26 BAND Silver 84 B
27 Parallel Gold 84 B
28 Warp Silver 83 B
29 Cognition Platinum 82 B
30 Devin Lounge 82 B
31 Keycard Silver 81 B
32 Anthropic Lounge 80 B
33 Amp Supporting 79 C
34 Goodfire Supporting 79 C
35 Fivetran Supporting 76 C
36 Diffusion Supporting 75 C
37 AWS Platinum 74 C
38 Sentry Gold 74 C
39 Osmantic Supporting 73 C
40 Composio Supporting 70 C
41 Gimlet Labs Supporting 70 C
42 Nimble Silver 65 D
43 Pinecone Gold 62 D
44 Parasail Silver 62 D
45 UiPath Supporting 60 D
46 Mixedbread Gold 59 F
47 Judgment Labs Silver 59 F
48 Factory Platinum 53 F
49 G2i Supported by 53 F
50 Higher Order Co Supporting 53 F
51 Overcut Gold 53 F
52 Niteshift Silver 48 F
53 Aviator Supporting 43 F
54 AgentsInTheCloud Supporting 30 F
— Lovable Supporting partial —
— Cisco Gold partial —

How to read this: a score measures anti-spoofing email records (SPF / DMARC), web transport (TLS 1.3, HSTS, certificate validity) and the standard security headers (CSP, X-Frame-Options, and the rest). It is an external snapshot, not a full test — the authenticated half of an application and its business logic are invisible to a passive scan. Those are exactly what a full engagement covers. This is a configuration checklist, not a vulnerability assessment. A low score does not mean a company has been breached or is exploitable. Two sponsors (Lovable and Cisco) are marked partial — their web headers sit behind bot-protection challenges, so only their email posture could be scored. No active scanning was run against any sponsor.

Want to see why your company is ranked this way? Email us at contact@earthshakersecurity.com and we will send your full report.

Think your rankings have improved? Submit a re-ranking request and we will re-score your surface.