The Netskope Cloud Confidence Index™ (CCI) is a database of cloud apps that Netskope has evaluated based on objective criteria adapted from Cloud Security Alliance Guidance. These criteria measure apps enterprise-readiness, taking into consideration app security, audit-ability, and business continuity.
Each app is assigned a score of 0-100, and based on that score, is placed into one of five Cloud Confidence Levels (CCL): Poor, Low, Medium, High, or Excellent. You can use the CCI score to make an app selection decision, as well as set policies based on level. For example, you can decide whether to let users share content in cloud storage apps rated Medium or below.
Data scientists at Netskope use two kinds of input: responses from various app vendors and other observed app capabilities. They first transform all input data into a numeric form. Then a learning algorithm is applied to combine different pieces of information to find the CCI score that is normalized between 0 and 100. In addition to this, Netskope also assigns rewards and penalties to the app based on the app category.
For a cloud storage app, the penalty for not encrypting data at rest is very high, while the reward is low since this is basic functionality. For a social app, the penalty for not encrypting data at rest would be less severe and so on. This is taken into consideration while computing the final CCI score.
For CCI evaluation and assessment of an app, please add your request to the CCI Research team by sending an email to cci-request@netskope.com or click Request New App in the upper right corner of the CCI page.
To open the CCI page, click CCI in the Netskope UI.
Users can search by app name, domain, or advanced search.
In addition, filter by CCL, category, range, or tag.
Cloud Confidence Index (CCI) Score
A numeric score from 0 to 100 that rates the security and enterprise readiness of a cloud service. Higher scores indicate greater maturity in areas such as data protection, compliance, and operational security. When a CCI score is unavailable, it displays as “N/A.”
Cloud Confidence Level (CCL)
A qualitative rating derived from the CCI score. CCL provides a quick visual indicator of enterprise readiness. The levels and their corresponding score ranges are:
| Level | CCI Score Range | Meaning |
|---|---|---|
| Excellent | 90 – 100 | Highest enterprise readiness |
| High | 75 – 89 | Strong enterprise readiness |
| Medium | 60 – 74 | Moderate enterprise readiness |
| Low | 50 – 59 | Below-average enterprise readiness |
| Poor | Below 50 | Significant enterprise readiness concerns |
| Unknown | N/A | CCI score is not available |
An information icon appears next to CCL throughout the product. Click it to view the full legend with score ranges.
Sanctioned and Unsanctioned Status
Indicates whether an AI application has been approved for enterprise use.
- Sanctioned – Approved for use within the organization.
- Unsanctioned – Not approved or potentially risky.
Traffic (Bytes)
The total volume of data exchanged with AI services, combining both uploaded and downloaded bytes. Displayed in human-readable units (KB, MB, GB, TB) with one decimal place of precision.
Sessions
A distinct user interaction or login session with an AI application. Session counts for unauthenticated traffic represent lower bounds.
Events
Individual API calls, tool invocations, or interactions with an MCP server. Events provide a more granular measure of server-level activity than sessions.
Known and Unknown Identities
- Known (Users) – Identities that can be mapped to actual users via your Identity Provider (IdP), such as Active Directory or Okta. Known users have attributes like display name, user groups, and organizational unit.
- Unknown – Unauthenticated or unrecognized traffic sources identified by distinct source IP address. Unknown identities behind shared networks (NAT, VPN) may be undercounted.
Pending Changes
If there are pending changes that need your attention, you’ll see the banner at the top of the page. Click the link to open the page and review/approve the changes.
