Security Score & Posture

Aggregates found risk to express the security posture of the organization and service as a single metric. You can grasp the overall posture and direction of improvement without counting individual findings one by one, and confirm the effect of your actions through trends over time.

Score composition

The score aggregates risk across several areas (ScoreArea).

• Security analysis results (code analysis / dependencies / web check / infrastructure as code / secrets)
• Infrastructure checks (cluster / CIS / hardening)
• New CVEs in the SBOM inventory

A service that has never been measured is marked as Not measured , so the average score is calculated only from targets that were actually measured.

Trends and metrics

• Score history : view the trend as daily snapshots.
• Week-over-week (WoW) : change versus the previous week.
• MTTR : the average time to remediate a vulnerability.

Priority

The fastest way to raise the score is to act first on items with high severity and KEV . Start from the top risk items on the Dashboard.

Next steps

Vulnerability Management→Handle items that raise the scoreDashboard→Start with the most at-risk itemsReports & VEX→Share posture and trends