A website appears on this list only when all of the following are true:

1. The site's domain has been verified by its organization.
2. The organization has enabled "Show this domain on the public ranking".
3. The organization's subscription grants more than 1000 monthly scan minutes.
4. Yesterday's failure rate for the scanned website was below 1% (at least one finished scan required).
5. The site fits in the top 1000 after ranking.

The order uses the failure rate adjusted for website complexity. Each website is clustered as Tiny (< 5 pages per scan), Small (5–19), Medium (20–99), Large (100–499) or Huge (500+), and more complex clusters get more leniency in the sort so a large site isn't penalised against a tiny one.

The ranking is recomputed once per day, so changes to the flag (or improvements today) won't surface until tomorrow.