Risk score and weighted risk score
Every finding scored for severity and likelihood, then weighted by the business criticality of its asset.
Purpose
A Critical vulnerability on a test machine and the same vulnerability on a domain controller are not the same risk, yet most tools rank them the same.
Design
A three-layer model turns each finding's severity into a risk score, adds likelihood and consequence factors such as known exploits and exposure, and multiplies by the asset's tier and your own business weights into a weighted risk score. Community puts the scores on every row of the Excel workbook and the Log Analytics tables; in Pro, views show how scores spread, each asset's total, highest and average, and findings grouped by risk rating.
Business opportunities
One number that ranks work by real business risk, so limited teams spend their time where it reduces the most risk.
Related features
Asset profiling across endpoints, identities, Azure and public IPs
One profile per asset - device, identity, Azure resource or public IP - built automatically from the data you already have.
Privilege tier catalog
Every role and permission in your tenant ranked by what an attacker could do with it - Tier 0 to Tier 3.
Public IP exposure with Shodan
See your internet-facing addresses the way an attacker does, tied to the asset behind them.
Findings workspace with Excel export
Every finding of a collection, most important first - filter, pivot, drill down and export to Excel.