A method, an apparatus and a system are provided for assessing at a security checkpoint the threat status of a liquid product, where the liquid product is comprised of a bottle at least partially filled with liquid. In accordance with a broad aspect, the level of fill is used as a factor in the determination of the threat status of the liquid product. In accordance with another broad aspect, an X-ray image of the liquid product is obtained and processed to derive a level of fill of the bottle and the threat status of the liquid product is determined at least in part based on the level of fill of the bottle. In accordance with yet another broad aspect, an X-ray image of the liquid product is processed to derive location information associated with a meniscus formed by the liquid in the bottle. An estimated length of a path followed by X-rays through the liquid held in the bottle is derived in part based on the location information and is used to determine the threat status of the liquid product.