Exposure Detection & Evidence Certainty

Exposure detection and evidence certainty describes how conclusively evidence shows that a company is exposed to or has mitigated a vulnerability.

		Detection
		Exposure	Mitigation
Certainty	Possible	Exposure Possible The evidence generally indicates that the company in question is unprotected from a threat. Evidence Examples: Relationship indicates Provider software in use	Mitigation Possible The evidence generally indicates that the company in question is protected from a threat. Evidence Example: Non-vulnerable records found
	Likely	Exposure Likely The evidence specifically indicates that the company in question is unprotected from a threat. Evidence Examples: Specific software in use Version in use	Mitigation Likely The evidence specifically indicates that the company in question is protected from a threat. Evidence Example: Long time since detection
	Confirmed	Exposure Confirmed The evidence confirms that the company is unprotected from a threat. Evidence Examples: Version in use, patching required Vulnerable configuration	Mitigation Confirmed The evidence confirms that the company is protected from a threat. Evidence Example: Patching records found

Exposure Detection

Exposure detection indicates a company’s current status to being exposed to a vulnerability. Use this to assess immediate risk and prioritize your remediation efforts.

Exposure

Vulnerabilities were detected within the last 60 days and may actively be impacting the company.

Slug name: currently or EXPOSED

Mitigation

Vulnerabilities were detected more than 60 days ago. There’s evidence of mitigation or there’s no evidence of exposure in the past 60 days.

Slug name: previously

Evidence Certainty

A measure of how certain we are about a company's detection status.

Possible

The evidence generally indicates that the company in question is or is not protected from a threat.

Slug name: POSSIBLE

Likely

The evidence specifically indicates that the company in question is or is not protected from a threat.

Slug name: LIKELY

Confirmed

The evidence confirms that the company is or is not protected from a threat.

Slug name: CONFIRMED