vulnerability-report-summarizer

Generate an executive report by ingesting raw vulnerability scan data to automatically deduplicate findings, score risk using CVSS, and map clear correlations to MITRE ATT&CK techniques. The output is a structured, audience-tailored summary highlighting risk and a prioritized remediation plan.

Vulnerability scan findings can be deduplicated across hosts. The Skill consolidates duplicate findings to reduce noise and improve accuracy, normalizing the data before applying CVSS scoring and generating structured technical and executive deliverables.

CVSS scoring and MITRE ATT&CK mapping work by applying available CVSS metrics to raw findings and mapping them to ATT&CK techniques when clear correlations exist. This process enriches the structured reports, providing context for both executive summaries and technical detail appendices.

The best way to prioritize remediation is to process scans through a normalizer that deduplicates findings, scores them by CVSS, and maps MITRE ATT&CK techniques. This produces a prioritized remediation plan and detailed appendix without retaining raw data beyond the session.

The vulnerability reporting process does not retain raw scan data after generating reports. It strictly avoids keeping raw vulnerability scan data beyond the active session, ensuring privacy while still producing audience-tailored executive summaries, technical deliverables, and remediation plans.

Vulnerability scan results are often too noisy due to duplicate findings across hosts. This issue is resolved by deduplicating and normalizing the data, then scoring risk with CVSS and mapping MITRE ATT&CK correlations to produce clear, executive-ready summaries.