Severity
Consider the technical seriousness and known characteristics of the weakness.
ShadowScan / Risk Scoring
Prioritize using evidence, exposure, and impact.
ShadowScan’s scoring model is being designed to support prioritization rather than replace professional judgment or organizational context.
Assessment workspace
Capability Breakdown
Designed to make risk easier to understand and execute against.
Exposure
Account for whether the affected asset or service is reachable and under what conditions.
Exploitability
Use available indicators to estimate how practical exploitation may be.
Business context
Adjust priorities using asset importance, likely impact, and compensating controls.
Explore More