vulnerability-management

Vulnerability prioritization combines CVSS v3.1 severity metrics with EPSS exploitability scores and asset criticality to calculate true risk. This evidence-based approach assigns SLA-based remediation deadlines, ensuring the most exploitable threats on critical assets are patched first.

Risk-based vulnerability management is the process of scoring threats by exploitability and impact rather than severity alone. You need it when facing high volumes of CVEs to reduce your attack surface by filtering noise and focusing remediation efforts on immediately exploitable vulnerabilities.

Yes, the skill supports read-only analysis intent classifications, allowing you to assess CVE exploitability and score severity without triggering mutating remediation actions. This enables safe evaluation of vulnerabilities before committing to any environment changes.

Yes, the skill assigns and tracks automated SLA-based remediation deadlines determined by vulnerability severity and exploitability scores. This ensures compliance with internal patching policies and provides continuous tracking from discovery through resolution.

For non-critical assets, the skill evaluates CVSS and EPSS scores to recommend compensating controls or formal risk acceptance instead of immediate patching. This risk-based approach optimizes remediation resources by avoiding unnecessary patches for low-exploitability threats.