READY™ replaces self-reported security posture with API-verified findings — the average org scores 20–35 points lower ...