Become a Channel PartnerLearn More
Zero Trust Risk ScoreOverview

Scoring Factors

Your Zero Trust Risk Score is calculated from multiple factors. Understanding these factors helps you maximize your score and understand what others'

7 min readUpdated Dec 17, 2025

Your Zero Trust Risk Score is calculated from multiple factors. Understanding these factors helps you maximize your score and understand what others' scores mean.

Factor Categories

ZTRS factors fall into three categories:

CategoryAvailable ToImpact

Universal FactorsAll zonesFoundation of your score Verified FactorsVerified + Secure zonesAdditional points for verified users AI Engine FactorsSecure Zone onlyAdvanced validation for maximum score

Universal Factors (All Zones)

These factors apply to every TripleCyber user, regardless of zone.

1. Account Age

How long your account has existed and been active.

Account AgeImpact

Less than 1 monthMinimal contribution 1-4 monthsBuilding - "Poor" rating ceiling 4-12 monthsEstablished - Moderate contribution 12+ monthsMature - Full contribution

Why it matters: New accounts are inherently less trustworthy. Time demonstrates commitment and allows patterns to emerge.

Tip: There's no shortcut for account age. Create your account early, even if you don't use all features immediately.

2. Zone Level

Your zone provides a baseline score and determines your ceiling.

ZoneBaseline BonusMaximum Ceiling

AnonymousMinimal250 VerifiedModerate750 SecureSignificant1000

Why it matters: Higher zones require more verification, which means more confidence in identity.

3. Activity Patterns

Consistent, normal usage patterns indicate a legitimate user.

Positive patterns:

  • Regular logins from consistent locations

  • Normal usage times

  • Gradual feature adoption

  • Stable IP addresses

Negative patterns:

  • Erratic login locations

  • Unusual hours consistently

  • Sudden behavior changes

  • Frequent IP changes

Why it matters: Legitimate users have consistent patterns. Fraudulent accounts often show erratic behavior.

Verified Zone Factors

These factors require at least Verified Zone status.

4. Linked Assets

The number and type of verified assets connected to your account.

Asset TypePoint ContributionZone Required

Verified EmailModerateVerified+ Verified PhoneModerateVerified+ Additional EmailsSmall eachVerified+ Domain OwnershipSignificantSecure LinkedInModerateSecure InstagramSmallSecure Other Social MediaSmall eachSecure

Why it matters: More verified assets = more proof of real identity. Each asset is another confirmation point.

Tip: Add all your legitimate assets. Quality matters more than quantity, but verified assets all contribute.

5. Contact Network

Your connections within the TripleCyber ecosystem.

Factors considered:

  • Number of verified contacts

  • Average ZTRS of your contacts

  • Mutual validations

  • Communication patterns

Why it matters: Legitimate users build legitimate networks. Being connected to high-ZTRS users suggests you're also legitimate.

💡

Note: You can't game this by adding random high-score users. The system looks for genuine interactions, not just contact lists.

6. Validation History

How you respond to validation requests and how others validate you.

Positive factors:

  • Responding promptly to validation requests

  • Being validated as authentic by others

  • Consistent validation responses

Negative factors:

  • Ignoring validation requests

  • Being reported as suspicious

  • Inconsistent responses

AI Engine Factors (Secure Zone Only)

These advanced validations are only available to Secure Zone users and are required to reach the maximum 1000 score.

7. Email Validation

AI-powered analysis of your email addresses.

Checks performed:

  • Data breach scanning (have your emails appeared in known breaches?)

  • Reputation analysis (are they on spam/malicious lists?)

  • Domain quality assessment

  • Usage pattern analysis

Impact on score:

  • Clean emails = positive contribution

  • Breached emails = reduced contribution (consider changing passwords)

  • Spam-listed = significant negative impact

8. Phone Validation

AI-powered analysis of your phone numbers.

Checks performed:

  • Carrier verification

  • Number type analysis (mobile, VoIP, landline)

  • Geographic consistency

  • Usage pattern verification

Impact on score:

  • Verified mobile = highest contribution

  • VoIP numbers = lower contribution

  • Inconsistent data = reduced score

9. Presence Validation

AI analysis of your digital presence and behavior patterns.

Checks performed:

  • IP address consistency

  • Geographic access patterns

  • Device fingerprinting

  • Login behavior analysis

  • Anomaly detection

Impact on score:

  • Consistent presence = positive contribution

  • Anomalies detected = investigation and possible reduction

  • VPN usage = may affect geographic consistency checks

10. Government ID Verification Quality

The quality and validity of your government ID verification.

Factors considered:

  • ID document validity

  • Face match confidence

  • Document authenticity checks

  • Database verification results

Impact on score:

  • High-confidence verification = significant bonus

  • Issues with verification = reduced contribution

How Factors Combine

Your ZTRS isn't a simple sum of factors. The algorithm considers:

Weighting:

  • Different factors have different weights

  • Zone level and government verification weigh heaviest

  • Account age provides steady baseline growth

  • Assets provide incremental boosts

Diminishing Returns:

  • First verified email = significant boost

  • Fifth verified email = smaller boost

  • Quality matters more than quantity

Negative Factors:

  • Some issues subtract from your score

  • Severe issues can cap your score below your zone's maximum

Ceiling Effects:

  • Your zone sets your maximum

  • You can't exceed your zone's ceiling no matter how many assets you add

Maximizing Your Zero Trust Risk Score

Anonymous Zone Users

  • Limited options due to zone restrictions

  • Account age is your main growth factor

  • Consider upgrading for more score potential

Verified Zone Users

  1. Verify both email and phone (required)

  2. Add additional email addresses you own

  3. Build your contact network

  4. Respond to validation requests

  5. Maintain consistent usage patterns

  6. Wait for account to mature (time-based)

Secure Zone Users

  1. Complete all Verified Zone optimizations

  2. Add domain ownership if applicable

  3. Link social media accounts (LinkedIn especially valuable)

  4. Pass AI engine validations:

  • Use clean, non-breached email addresses

  • Use legitimate phone numbers (avoid VoIP if possible)

  • Maintain consistent access patterns

  1. Complete high-quality government ID verification

  2. Build network of other Secure Zone users

Factors That Can Hurt Your Score

Direct Negative Impacts

  • Emails found in data breaches

  • Phone numbers flagged as suspicious

  • Reported behavior from other users

  • Failed validation attempts

  • Security incidents on your account

Indirect Negative Impacts

  • Removing verified assets

  • Inconsistent access patterns

  • Long periods of inactivity

  • Network of low-ZTRS contacts only

Score Recovery

If your score drops, you can recover:

For breach-related drops:

  1. Change passwords on affected accounts

  2. Remove breached assets

  3. Add new, clean assets

  4. Time will help as the issue ages

For behavior-related drops:

  1. Identify the problematic pattern

  2. Correct the behavior

  3. Maintain consistent positive patterns

  4. Score will gradually recover

For reported incidents:

  1. If falsely reported, contact support

  2. If legitimate, change behavior

  3. Time helps recovery after correction

Viewing Your Score Factors

You can see what's affecting your score:

  1. Open TripleEnable

  2. Go to your profile

  3. Tap your ZTRS score

  4. View "Score Breakdown"

What you'll see:

  • Overall score

  • Zone contribution

  • Asset contributions

  • Account age status

  • AI validation status (Secure Zone)

  • Any warnings or issues

Frequently Asked Questions

Q: Which factor matters most?

A: Zone level and government ID verification (for Secure Zone) have the highest impact. But all factors contribute to your total.

Q: Can I see the exact point values?

A: We show factor contributions but not exact values. This prevents gaming the system.

Q: How often does my score update?

A: ZTRS updates in near real-time as factors change. Adding an asset reflects within minutes.

Q: Will using a VPN hurt my score?

A: Consistent VPN use from the same servers is fine. Erratic VPN usage across many locations may affect presence validation.

Q: My email was in a breach - what now?

A: Change passwords immediately. Your score may be affected. Consider adding a new, clean email address to compensate.

Next Steps

  • Where to View ZTRS - Find your score and factor breakdown

  • Secure Zone - Unlock AI engine factors for maximum score

  • Managing Assets - Add and verify assets to boost your score

  • TripleValidate - See how others' ZTRS helps you make decisions