# Profile completeness

> How inspect.software measures organization profile completeness — verified domain, description, homepage, contact, and identity fields. 25% of the org index.


**Profile completeness** measures whether an organization is accountable and
clearly presented: a verified real-world identity, a stated purpose, and
working ways to reach it. For anyone deciding whether to depend on an
organization's software, the profile is the difference between an
institution and an anonymous namespace.

- **Assessment:** [organization](/wiki/organization-assessment), Governance & Profile category (100% within category)
- **Weight in organization overall:** 25%
- **Metric key:** `profile_completeness`

## How the value is computed

| Component | Weight | Evidence |
| --------- | ------ | -------- |
| Verified domain | 25 | domain verification completed on GitHub |
| Description | 20 | the organization's description field |
| Homepage | 15 | a working website URL |
| Display name | 10 | a human-readable name beyond the login |
| Location | 10 | a stated location |
| Contact email | 10 | a public contact address |
| Social profile | 10 | at least one linked social account |

## Why a profile is governance evidence

- **Domain verification is the anchor — and the heaviest component.** It
  cryptographically ties the GitHub organization to a real-world domain,
  which is genuine supply-chain evidence: it forecloses a whole class of
  namespace-impersonation attacks. The same signal feeds each repository's
  [stewardship](/wiki/stewardship) metric.
- **Description, homepage, and name** establish what the organization is
  and where its canonical presence lives.
- **Location, email, and social links** are accountability surface: routes
  by which a security researcher, a packager, or a legal team can actually
  make contact.

## Reading the result

- This is the most directly actionable metric in the organization
  assessment — every component is a settings field, and the whole checklist
  can be completed in under an hour.
- An incomplete profile on an otherwise strong organization usually
  indicates neglect rather than concealment — but the record can only
  publish what is visible, and the metric reads accordingly.

## Improving the value

- Verify the organization's domain in GitHub settings — the single largest
  component.
- Fill every profile field: description, homepage, display name, location,
  public email, and at least one social profile.

Related: [stewardship](/wiki/stewardship) ·
[organization assessment](/wiki/organization-assessment)