Trust Badges
Bronze, Silver, and Gold Trust Badges — visible signals of progress through a structured credentialing pathway, with live verification in the Public Business Trust Registry. Readiness you can show; not legal compliance.
Bronze establishes readiness. Silver verifies implementation. Gold demonstrates continued maturity.
Know → Show → Maintain
Baseline Readiness
Bronze establishes baseline cybersecurity readiness under the applicable Legacy Core credential standard.
The business completed Legacy Core's baseline credential requirements and is listed in the Public Business Trust Registry. Bronze does not claim that every control has been technically verified.
Evidence-Verified Implementation
Silver recognizes documented implementation that has been reviewed under the applicable Legacy Core credential standard.
Silver is earned when documented implementation has been reviewed. Silver cannot be earned through self-attestation. Businesses may progress through an Alliance Partner-supported or independent review pathway.
Ongoing Verified Readiness
Gold recognizes continued cybersecurity readiness demonstrated over time under the applicable Legacy Core credential standard.
Gold is the highest published Trust Badge tier. It recognizes continued readiness demonstrated over time. Gold cannot be earned through self-attestation.
Why it matters now
Small businesses are increasingly being asked to show more than good intentions on cybersecurity. Customers, banks, insurers, and partners want clearer signals that a business has taken meaningful steps to reduce risk and build trust.
Customers, lenders, insurers, and regulators increasingly expect documented, verifiable cyber readiness. Legacy Core Trust Badges are visible signals of progress through a structured credentialing pathway, tied to live verification. Not a logo you made in Canva.
What it means — and what it does not
A reviewed credential, not a marketing claim. Human-reviewed readiness with live verification.
The Trust Badge means
Baseline readiness, then verified implementation, then continued maturity
Bronze establishes readiness. Silver verifies implementation. Gold demonstrates continued maturity.
A live verification link
Every badge display links to a real-time verification page in the Public Business Trust Registry. Status reflects current credential state.
Framework-informed readiness
The credentialing pathway is informed by recognized frameworks such as NIST CSF 2.0 — translated into plain English for small business owners.
The Trust Badge does not mean
Not a government credential
Legacy Core is a private credentialing authority, not a regulator. The badge is not a license, permit, or government endorsement.
Not a guarantee of any outcome
The badge demonstrates commitment to readiness; it does not promise the absence of risk or any particular incident outcome.
Not transferable
The credential belongs to the credentialed business. It cannot be assigned to subsidiaries, affiliates, or successor entities without re-credentialing.
Bronze. Silver. Gold.
Bronze is sold direct. Silver and Gold are earned outcomes. Silver and Gold cannot be earned through self-attestation.
Know → Show → Maintain
Baseline Readiness
Know it. Document it. Own it.
Bronze establishes baseline cybersecurity readiness under the applicable Legacy Core credential standard.
Start here
↓
Sold direct
Begin the credentialing pathway and earn Bronze through Legacy Core directly.
Evidence-Verified Implementation
Show it.
Silver recognizes documented implementation that has been reviewed under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
↓
Alliance Partner-supported pathway
Alliance Partners may help implement cybersecurity improvements. Legacy Core determines whether Silver has been earned.
Independent review pathway
Businesses may also progress through an independent review pathway. Self-attestation is never accepted.
Ongoing Verified Readiness
Maintain it.
Gold recognizes continued cybersecurity readiness demonstrated over time under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
Alliance Partner-supported pathway
Alliance Partners may help implement additional protections. Legacy Core determines whether Gold has been earned.
Independent review pathway
Businesses may also progress through an independent review pathway. Self-attestation is never accepted.
Display guidance
Wherever the badge appears, it must link to your verification URL. That live link is what makes the credential trustworthy.
Do
Do not
Verification link behavior
Every credential has a verification URL at /verify/<credential-ID>. The page returns one of three public-facing states in real time: Verified, Expired, or Not Found.
Misuse and revocation
Reports of badge misuse — display after expiration, display of a tier the business has not earned, modified artwork, or impersonation of a credentialed business — are investigated by Legacy Core. Confirmed misuse results in credential revocation. Public verification then returns Expired so reviewers see an accurate status.
Report suspected misuse: verify@legacycore.com
That the business has progressed through Legacy Core’s structured credentialing pathway at the displayed tier and is listed in the Public Business Trust Registry. Legacy Core Trust Badges are visible signals of progress with live verification — not a claim of legal compliance.
Silver and Gold cannot be earned through self-attestation. Businesses may progress through an Alliance Partner-supported or independent review pathway. Staying listed on the registry is $199/year or $19/month.
Every credentialed business receives a verification URL of the form /verify/[credential-ID]. Wrap the badge image in a link pointing to that URL. The page returns one of three public-facing states: Verified, Expired, or Not Found.
Suspected misuse can be reported to verify@legacycore.com. Legacy Core investigates each report, contacts the business, and revokes the credential where misuse is confirmed. A revoked credential returns Expired on the public verification page.
No. The badge must be removed from all displays when the credential expires, lapses, or is revoked. Continued display is a misuse and can result in revocation.
Bronze establishes readiness. Silver verifies implementation. Gold demonstrates continued maturity. Each tier is tied to live verification.