Vulnerability Management Calculators

25 free vulnerability management calculators in Cyber Security.

Asset Criticality CalculatorScore an asset 0–100 for criticality from CIA requirements, user population, revenue dependency, regulation and exposure, then tier it.
Asset Exposure CalculatorScore how exposed one asset is: reachability, open services, admin access, authentication strength, segmentation and its worst open finding.
Attack Surface CalculatorIndex your external attack surface across hosts, services, web apps, API endpoints, remote users, integrations and cloud accounts.
CVE Severity CalculatorAdjust a published CVSS base score for EPSS probability, KEV listing, exposure, data sensitivity and compensating controls.
CVSS v3 Score CalculatorCompute a CVSS v3.1 base score from the eight base metrics, with the impact and exploitability sub-scores, vector string and severity rating.
CVSS v4 Score CalculatorDerive the CVSS 4.0 macro-vector from the base, threat and requirement metrics and turn it into a severity score and vector string.
Exploit Probability CalculatorConvert an EPSS 30-day score into the probability of exploitation over any horizon, adjusted for KEV listing and public exploit code.
Exploitability CalculatorCompute the CVSS exploitability sub-score from AV, AC, PR and UI, normalise it to 0–10 and adjust it for exploit maturity.
Exposure Window CalculatorMeasure the days between disclosure and deployment, the asset-days at risk and the cumulative chance of exploitation in that window.
Mean Time to Patch CalculatorWork out MTTP overall and per severity from your closed findings, and compare each figure against its remediation SLA.
Patch Compliance CalculatorMeasure the share of findings remediated inside SLA overall and per severity, and how many more fixes you need to hit your target.
Patch Priority CalculatorRank a vulnerability for patching from EPSS probability, KEV listing, exploit maturity, asset criticality and exposure.
Patch Window CalculatorSize a maintenance window: waves, patch and reboot time, validation, expected rollbacks and whether the work fits the outage you were given.
Remediation Cost CalculatorCost a remediation campaign: engineering hours with testing overhead, downtime, tooling, cost per finding and FTE months needed.
Remediation Progress CalculatorTrack backlog burn-down: closure and intake rates, net change, current backlog and how long until you reach your target.
Risk Matrix CalculatorScore a 5×5 likelihood-versus-impact risk matrix, apply control effectiveness for residual risk and test it against your risk appetite.
Risk Reduction CalculatorQuantify the annual loss expectancy removed by a remediation programme and the return on the money it costs.
Scanner Coverage CalculatorWork out real scan coverage from inventory gaps, authenticated scan depth and scan freshness, and count the assets you never see.
Scanner False Positive Rate CalculatorTurn triage outcomes into false-positive rate, precision, recall and F1, plus the hours and money spent chasing noise.
Security Debt CalculatorQuantify unremediated vulnerability debt in weighted units, engineer hours and money, including the interest it accrues each month.
Technical Debt Risk CalculatorScore the security risk carried by end-of-life systems, unsupported versions, long-unpatched hosts, legacy code and thin test coverage.
Threat Intelligence Coverage CalculatorScore threat-intelligence coverage from ATT&CK technique visibility, indicator freshness, feed breadth and enrichment automation.
Vulnerability Density CalculatorNormalise vulnerability counts per asset and per thousand lines of code, with a severity-weighted density for fair comparison.
Vulnerability Health Score CalculatorRoll MTTP, SLA compliance, scan coverage, open criticals and backlog age into one 0–100 health score with a grade.
Vulnerability Management Maturity CalculatorRate six vulnerability-management domains 1–5 and get a weighted maturity score, a level, your weakest domain and the next step.