Skip to main content
Every finding gets a CVSS score. CVSS (Common Vulnerability Scoring System) is the industry-standard way of expressing how severe a vulnerability is, rated from 0 to 10. The higher the number, the more serious the issue. The agent computes the CVSS score for each finding using what it learned during the scan: how the vulnerability is exploited, what access it gives an attacker, whether authentication is required, and how much damage it can do. It follows the same CVSS v3 methodology the wider security industry uses, so a score from us means the same thing as a score from anywhere else.

​
Severity tiers

  • Informational: 0
  • Low: 0.1 to 3.9
  • Medium: 4.0 to 6.9
  • High: 7.0 to 8.9
  • Critical: 9.0 to 10.0
The agent uses the score to prioritize, so critical and high-severity findings surface at the top of the dashboard by default. You can sort or filter by severity to focus on whichever tier matters most to you right now.