Legacy Core™

Trust Badges

A credential your clients can verify in seconds.

Bronze, Silver, and Gold Trust Badges — visible signals of progress through a structured credentialing pathway, backed by live verification in the Public Business Trust Registry. Readiness you can show; not legal compliance.

Trust Badge tiers

Three tiers signal progression in small business cybersecurity readiness. Each tier links to a public verification page.

Bronze

Bronze Trust Badge

Entry-level credential for businesses establishing a verifiable cybersecurity readiness baseline.

What it signals: the business has completed Legacy Core foundational readiness review and is listed in the public registry.

Silver

Silver Trust Badge

Intermediate credential for businesses operating documented controls and ongoing review.

What it signals: documented controls, periodic review, and continued alignment with small business cybersecurity readiness expectations.

Gold

Gold Trust Badge

Advanced credential for businesses demonstrating mature, sustained cybersecurity readiness practices.

What it signals: sustained controls, periodic third-party touchpoints, and a track record of credential renewal in good standing.

Why it matters now

Why the Trust Badge matters now

Small businesses are increasingly being asked to show more than good intentions when it comes to cybersecurity. Customers, banks, insurers, and partners want clearer signals that a business has taken meaningful steps to reduce risk and build trust.

Customers, lenders, insurers, and regulators increasingly expect documented, verifiable cyber readiness. Legacy Core Trust Badges are visible signals of progress through a structured credentialing pathway — tied to live verification, not just a visual symbol.

  • A trust signal your customers, partners, and lenders can check in one click
  • Public Business Trust Registry listing showing current credential status
  • Helps reduce hesitation when people decide whether to work with you — without promising outcomes

What it means — and what it does not

Honest about what the badge proves.

A reviewed credential — not a marketing claim. Independently reviewed readiness with live verification.

The Trust Badge means

  • Awareness, action, or maintain — by tier

    Bronze signals awareness credentialing. Silver reflects partner-attested implemented controls. Gold reflects ongoing monitoring and continued partner attestation.

  • A live verification link

    Every badge display links to a real-time verification page in the Public Business Trust Registry. Status reflects current credential state.

  • Framework-informed readiness

    The credentialing pathway is informed by recognized frameworks such as NIST CSF 2.0 — translated into plain English for small business owners.

The Trust Badge does not mean

  • Not a government credential

    Legacy Core is a private credentialing authority, not a regulator. The badge is not a license, permit, or government endorsement.

  • Not a guarantee of any outcome

    The badge demonstrates commitment to readiness; it does not promise the absence of risk or any particular incident outcome.

  • Not transferable

    The credential belongs to the credentialed business. It cannot be assigned to subsidiaries, affiliates, or successor entities without re-credentialing.

Bronze. Silver. Gold.

How each tier is earned

Bronze is sold direct. Silver and Gold are earned outcomes that a business demonstrates over time — never purchased direct.

  1. Bronze

    Bronze Trust Badge — Awareness

    Awareness credential indicating the business has completed Legacy Core's 15-module Bronze credentialing pathway and final assessment.

    Sold direct

    • Sold direct

      Begin the credentialing pathway and earn Bronze through Legacy Core directly.

      $699

  2. Silver

    Silver Trust Badge — Action

    Action credential earned through Alliance Partner attestation and evidence of implemented controls.

    Earned — never sold direct

    • Alliance Partner attestation

      Earned at no additional cost when an Alliance Partner attests to controls and supplies supporting evidence.

      Free with Alliance Partner attestation + evidence

    • Third-party verification

      Earned through independent verification by a CISSP-credentialed reviewer or qualified MSSP.

      $299

  3. Gold

    Gold Trust Badge — Maintain

    Maintain credential signaling ongoing monitoring and continued partner attestation — sustained readiness over time.

    Earned — never sold direct

    • Alliance Partner attestation

      Earned at no additional cost when an Alliance Partner attests to mature controls and supplies supporting evidence.

      Free with Alliance Partner attestation + evidence

    • Third-party verification

      Earned through independent verification by a CISSP-credentialed reviewer or qualified MSSP.

      $299

Display guidance

Display the badge where clients see you.

Wherever the badge appears, it must link to your verification URL. That live link is what makes the credential trustworthy.

Display rules — what to do and what to avoid

Do

  • Display the Trust Badge on your business website, in email signatures, in proposals, and on client-facing collateral.
  • Link every badge image to your verification URL so clients can confirm credential status in real time.
  • Use the tier label correctly: Bronze, Silver, or Gold — whichever tier you currently hold.
  • Include the badge in physical signage at your place of business and in printed deliverables.

Do not

  • Do not modify the badge artwork, color, proportions, or wording.
  • Do not display a tier higher than the one currently issued to your business.
  • Do not display the badge after a credential has expired, lapsed, or been revoked.
  • Do not imply a tier or status that is not reflected in the public registry.

Verification link behavior

Every credential has a verification URL at /verify/<credential-ID>. The page returns the live credential state in real time: Active, Renewal Due, Expired, Suspended, or Revoked.

See a verification page

Misuse and revocation

Misuse undermines every credential in the registry.

Reports of badge misuse — display after expiration, display of a tier the business has not earned, modified artwork, or impersonation of a credentialed business — are investigated by Legacy Core. Confirmed misuse results in revocation. Revoked credentials remain visible in the registry as Revoked so the public record reflects accurate status.

Report suspected misuse: verify@legacycore.com

Frequently asked questions

Earn the badge. Display it. Let clients verify.

Start with a free Trust Audit, then follow the pathway to your first credential — always tied to live verification.

Trust Badges — Legacy Core | Legacy Core