How It Works
A credentialing pathway your clients can verify.
Legacy Core™ helps small businesses understand their Trust Gap, establish readiness, earn a reviewed Trust Badge, and make that credential checkable in the Public Business Trust Registry.
Start here
See what you could send before someone asks.
The Trust Gap readiness assessment shows what documented evidence your business could assemble across identity, data protection, resilience, operations, and governance.
The readiness assessment does not issue a credential. It shows what evidence you could assemble — not what you have earned yet.
At a glance
Four parts. Assessment is not the badge.
Assessment, credential pathway, live verification, and ongoing badge status.
- AssessmentNot a credential
Readiness assessment
Free · diagnostic only · not a credential
- Credential pathway
Bronze → Silver → Gold
Bronze establishes readiness. Silver verifies implementation. Gold demonstrates continued maturity.
- Verification
Trust Badge + registry
Live /verify page anyone can check
- Maintenance
Ongoing trust
Stay listed on the registry ($199/year or $19/month). Silver and Gold cannot be earned through self-attestation.
Overview
The credentialing pathway in one sentence.
Understand your Trust Gap, establish readiness, earn a reviewed Trust Badge, and make it verifiable in the Public Business Trust Registry.
A pathway, not a class
Legacy Core is a credentialing authority. The pathway exists so a small business can turn cybersecurity readiness into a Trust Badge someone else can check.
Framework-informed
The pathway is aligned with recognized readiness frameworks, including NIST CSF 2.0 and CIS Controls. Aligned with those sources. Not a substitute for them, and not legal compliance.
Reviewed, then issued
Every credential is subject to review under the applicable Legacy Core credential standard. Bronze establishes readiness. Silver and Gold require evidence-based verification. The result is a Trust Badge clients can verify.
The pathway
The credentialing pathway, step by step
Understand the Trust Gap, establish readiness, earn a reviewed Trust Badge, make it verifiable.
Step 1
Understand your Trust Gap
Start by understanding where your business currently stands and where cybersecurity readiness may not yet be visible to customers or business partners.
Step 2
Establish readiness
Complete the applicable Legacy Core credentialing requirements designed specifically for small businesses.
Step 3
Earn the appropriate credential
Legacy Core reviews eligibility under the applicable credential standard. Businesses that meet the requirements earn the corresponding Trust Badge.
Step 4
Make trust verifiable
Credential status can be verified through the Public Business Trust Registry, giving customers and business partners a simple way to confirm current standing.
Step 5
Continue strengthening readiness
Businesses can continue improving cybersecurity maturity over time and may work with qualified Alliance Partners and other professionals to implement additional protections.
The Legacy Core ecosystem
Legacy Core creates the trust signal. Partners implement security.
After the Readiness assessment and Trust Badge, Alliance Partners may help businesses strengthen cybersecurity. Partners do not award the badge.
- Step 1
Understand the Trust Gap
Start with a free Trust Audit or enter the credentialing pathway. The Trust Audit is diagnostic only. It does not issue a credential.
Start Your Free Trust Audit - Step 2
Earn a reviewed Trust Badge
Complete the applicable credentialing requirements. Legacy Core reviews eligibility under the applicable credential standard. The result is a Trust Badge listed in the Public Business Trust Registry.
Get credentialed - Step 3
Choose a vetted Alliance Partner
Select from the Alliance Partner Directory: established MSSPs, cyber insurance advisers, CPAs, and service providers reviewed by Legacy Core.
See partners - Step 4
Implement the right work
Alliance Partners may implement security. They cannot purchase, guarantee, or self-award a Trust Badge. Legacy Core determines whether the credential has been earned.
- Step 5
Keep strengthening readiness
Businesses can continue improving cybersecurity maturity over time. Silver and Gold cannot be earned through self-attestation. Partners implement. Legacy Core decides.
Partner with us
Vetted Alliance Partners
Established implementers. Not generic lead lists.
Legacy Core is a credentialing authority, not an MSP. After credentialing, businesses work with partners who already serve professional services firms. Alliance Partners may participate in referral and ecosystem opportunities.
Partners are reviewed before directory listing. They cannot purchase, guarantee, or self-award a Trust Badge. Self-attestation by businesses is never accepted.
- MSSPs & managed security providers
- Cyber insurance & commercial risk advisers
- CPAs, bookkeepers & business advisers
- Chambers & professional associations
Frequently asked questions
Do I need the Readiness assessment first?
You can pursue Bronze credentialing directly, but the Trust Gap readiness assessment is the recommended starting point. It is diagnostic only. It does not issue a credential.
What happens after I earn Bronze?
Credentialed businesses appear in the Public Business Trust Registry. They may work with Alliance Partners and other trusted professionals as cybersecurity maturity grows. Partners may implement security. Legacy Core determines whether a higher credential has been earned.
How long does the credentialing pathway take?
Many businesses complete Bronze in a few weeks, depending on how quickly they can finish the readiness work. There is no fixed deadline.
What happens if more work is needed before a credential is issued?
Legacy Core will tell you that the credential is not ready to issue yet. You can continue the pathway and come back when the business meets the applicable credential standard.
How is this different from a class?
Legacy Core issues credentials. It does not run a class. The pathway ends in a Trust Badge and a live registry listing.
How do I earn Silver or Gold?
Silver and Gold are earned outcomes, never sold direct. Silver and Gold cannot be earned through self-attestation. Businesses may progress through an Alliance Partner-supported or independent review pathway.
What appears in the public registry?
Credential information a customer or partner needs to verify status: business name, tier, credential status, area served, and related public dates when shown. Owner contact information, payment data, uploaded evidence, internal notes, and review history are never displayed publicly.
What if I let my credential lapse?
A lapsed credential shifts to Expired status in the registry. Verification pages continue to load, but the badge is no longer valid. You can renew to return to good standing.
See the pathway from the inside.
Start with Bronze and earn the credential your clients can verify. Stay listed on the Public Business Trust Registry. Silver and Gold cannot be earned through self-attestation.