IT Asset: Assets Risk Posture
Effective risk, scored per asset — not raw CVSS
Every asset carries a risk that combines CVSS, EPSS, CISA KEV, exposure and business criticality. The weights are yours to tune, and the result points straight at the highest-leverage fix.
- 142 assets sit in the critical tier, where a compromise would hurt the business most.
- 318 face the internet. Exposure and criticality together decide what gets fixed first.
- 5 signals make each score: CVSS severity, EPSS exploit likelihood, CISA known-exploited (KEV) status, exposure and criticality.
Per-asset risk
A score that reflects real danger
CVSS alone over-counts. CAIVA folds in exploit probability, known exploited status, how exposed the asset is and how much it matters to the business, so the queue is ordered by what is actually risky.
Asset Risk Posture
Effective risk · CVSS + EPSS + KEV + exposure + criticality
The hot corner — critical, internet-facing assets — is where a single fix moves the score most.
The model
Five signals, weights you control
The score is transparent and tunable — not a black box.
CVSS + EPSS + KEV
Base severity, exploit probability and whether it is being exploited in the wild.
Exposure
Internet-facing assets carry more risk than isolated ones at the same CVSS.
Business criticality
A crown-jewel database outranks a lab box with the same finding.
Tunable weights
Shift the balance to match your risk appetite; the whole estate re-scores.
Connected platform
How Assets Risk Posture connects
See Assets Risk Posture on your estate
Tell us a little about your environment and we’ll put together a walkthrough tailored to it.
- Agentless discovery
- Real-world prioritisation
- Human-gated proof