Vulnerability Management Calculators
25 free vulnerability management calculators in Cyber Security.
- Asset Criticality CalculatorScore an asset 0–100 for criticality from CIA requirements, user population, revenue dependency, regulation and exposure, then tier it.
- Asset Exposure CalculatorScore how exposed one asset is: reachability, open services, admin access, authentication strength, segmentation and its worst open finding.
- Attack Surface CalculatorIndex your external attack surface across hosts, services, web apps, API endpoints, remote users, integrations and cloud accounts.
- CVE Severity CalculatorAdjust a published CVSS base score for EPSS probability, KEV listing, exposure, data sensitivity and compensating controls.
- CVSS v3 Score CalculatorCompute a CVSS v3.1 base score from the eight base metrics, with the impact and exploitability sub-scores, vector string and severity rating.
- CVSS v4 Score CalculatorDerive the CVSS 4.0 macro-vector from the base, threat and requirement metrics and turn it into a severity score and vector string.
- Exploit Probability CalculatorConvert an EPSS 30-day score into the probability of exploitation over any horizon, adjusted for KEV listing and public exploit code.
- Exploitability CalculatorCompute the CVSS exploitability sub-score from AV, AC, PR and UI, normalise it to 0–10 and adjust it for exploit maturity.
- Exposure Window CalculatorMeasure the days between disclosure and deployment, the asset-days at risk and the cumulative chance of exploitation in that window.
- Mean Time to Patch CalculatorWork out MTTP overall and per severity from your closed findings, and compare each figure against its remediation SLA.
- Patch Compliance CalculatorMeasure the share of findings remediated inside SLA overall and per severity, and how many more fixes you need to hit your target.
- Patch Priority CalculatorRank a vulnerability for patching from EPSS probability, KEV listing, exploit maturity, asset criticality and exposure.
- Patch Window CalculatorSize a maintenance window: waves, patch and reboot time, validation, expected rollbacks and whether the work fits the outage you were given.
- Remediation Cost CalculatorCost a remediation campaign: engineering hours with testing overhead, downtime, tooling, cost per finding and FTE months needed.
- Remediation Progress CalculatorTrack backlog burn-down: closure and intake rates, net change, current backlog and how long until you reach your target.
- Risk Matrix CalculatorScore a 5×5 likelihood-versus-impact risk matrix, apply control effectiveness for residual risk and test it against your risk appetite.
- Risk Reduction CalculatorQuantify the annual loss expectancy removed by a remediation programme and the return on the money it costs.
- Scanner Coverage CalculatorWork out real scan coverage from inventory gaps, authenticated scan depth and scan freshness, and count the assets you never see.
- Scanner False Positive Rate CalculatorTurn triage outcomes into false-positive rate, precision, recall and F1, plus the hours and money spent chasing noise.
- Security Debt CalculatorQuantify unremediated vulnerability debt in weighted units, engineer hours and money, including the interest it accrues each month.
- Technical Debt Risk CalculatorScore the security risk carried by end-of-life systems, unsupported versions, long-unpatched hosts, legacy code and thin test coverage.
- Threat Intelligence Coverage CalculatorScore threat-intelligence coverage from ATT&CK technique visibility, indicator freshness, feed breadth and enrichment automation.
- Vulnerability Density CalculatorNormalise vulnerability counts per asset and per thousand lines of code, with a severity-weighted density for fair comparison.
- Vulnerability Health Score CalculatorRoll MTTP, SLA compliance, scan coverage, open criticals and backlog age into one 0–100 health score with a grade.
- Vulnerability Management Maturity CalculatorRate six vulnerability-management domains 1–5 and get a weighted maturity score, a level, your weakest domain and the next step.