Cloud Confidence Index (CCI) Score
A numeric score from 0 to 100 that rates the security and enterprise readiness of a cloud service. Higher scores indicate greater maturity in areas such as data protection, compliance, and operational security. When a CCI score is unavailable, it displays as “N/A.”
Cloud Confidence Level (CCL)
A qualitative rating derived from the CCI score. CCL provides a quick visual indicator of enterprise readiness. The levels and their corresponding score ranges are:
| Level | CCI Score Range | Meaning |
|---|---|---|
| Excellent | 90 – 100 | Highest enterprise readiness |
| High | 75 – 89 | Strong enterprise readiness |
| Medium | 60 – 74 | Moderate enterprise readiness |
| Low | 50 – 59 | Below-average enterprise readiness |
| Poor | Below 50 | Significant enterprise readiness concerns |
| Unknown | N/A | CCI score is not available |
An information icon appears next to CCL throughout the product. Click it to view the full legend with score ranges.
Sanctioned and Unsanctioned Status
Indicates whether an AI application has been approved for enterprise use.
- Sanctioned – Approved for use within the organization.
- Unsanctioned – Not approved or potentially risky.
Traffic (Bytes)
The total volume of data exchanged with AI services, combining both uploaded and downloaded bytes. Displayed in human-readable units (KB, MB, GB, TB) with one decimal place of precision.
Sessions
A distinct user interaction or login session with an AI application. Session counts for unauthenticated traffic represent lower bounds.
Events
Individual API calls, tool invocations, or interactions with an MCP server. Events provide a more granular measure of server-level activity than sessions.
Known and Unknown Identities
- Known (Users) – Identities that can be mapped to actual users via your Identity Provider (IdP), such as Active Directory or Okta. Known users have attributes like display name, user groups, and organizational unit.
- Unknown – Unauthenticated or unrecognized traffic sources identified by distinct source IP address. Unknown identities behind shared networks (NAT, VPN) may be undercounted.