Guides
Guides
Practical explanations of vulnerability scores, the DEFCON level and what the NIS2 directive asks for.
CVSS, EPSS and KEV: how to use them together
Three different measures to decide which vulnerabilities to fix first: how severe it is, how likely it is to be exploited, whether it is already exploited.
How to read the DEFCON level
The level of the day shows at a glance how serious the cyber threat is: what each level means, what to do and how to read the briefing.
NIS2 and vulnerability management
What the NIS2 directive asks about vulnerabilities, what it means in practice and where a service that tells you every day which ones matter can help.