External scanning has real value — as one input among six, not as the grade. Polestead brings it in through connectors, scoped by your classification.
Yes. External Signals uses an external attack-surface license you bring and are authorized to use, with EU-domiciled providers available.
No. Findings attach to the resolved vendor entity as evidence for review and reassessment — never a public score a vendor must dispute.
No. Signals are scoped by tier, so you scan the few hundred vendors your classification warrants, not the whole register.