Skip to content
Valystrum - AI-powered intelligence for continuous security and compliance.

Product

Unified Risk Score

The Unified Risk Score is Valystrum’s answer to the perennial CISO question: “Where is my greatest risk, and how do I prove it to the board?” Every asset in your environment receives a risk score, calculated across six dimensions: vulnerabilities, exploitability, external exposure (EASM), identity/entitlement, behavioural anomalies, and compliance gaps. This multidimensional approach ensures that risk is contextual, actionable, and always up to date.

unified risk scoreasset risk ratingrisk quantificationboard-level riskvalystrumtenablequalys

Key Features

  • Six-Dimension Scoring Model: Incorporates CVSS, exploit probability (EPSS/KEV), EASM exposure, identity blast radius, behavioral baseline deviations, and compliance status.
  • SPEC-01 Engine: Proprietary risk engine with per-asset, per-dimension breakdown and AI-driven explanations.
  • Continuous, Event-Driven Updates: Scores update automatically as new findings, exposures, or behavioral anomalies are detected.
  • Board-Ready Metrics: Roll up risk scores to organization, business unit, or asset class for executive reporting.
  • Weight Tuning: CISOs and admins can adjust dimension weights to reflect business priorities.
  • AI Explainability: Every score is accompanied by an AI-generated explanation, supporting transparency and auditability.

How it works

Valystrum’s risk engine evaluates each asset through a four-stage process:

  1. Vulnerability Analysis: Prioritizes vulnerabilities by severity, exploitability, and business impact.
  2. Exposure & Entitlement: Assesses external attack surface, overprivileged identities, and blast radius.
  3. Behavioral & Compliance: Flags anomalies and compliance gaps, factoring in business criticality.
  4. Final Score Mapping: Normalizes all inputs to a 0–100 scale, color-coded for easy triage (green/yellow/orange/red).

Competitive Differentiators

  • Six-Dimension Model: Most competitors use 2–3 dimensions; Valystrum’s model is broader and more contextual.
  • Continuous, Not Periodic: Scores update with every change, not just on scheduled scans.
  • AI-Driven Explanations: No more black-box risk numbers, every score is transparent and defensible.
  • Board-Level Rollups: Designed for executive communication, not just technical triage.
  • No Re-Mapping: One control, one piece of evidence, surfaced against every framework-no duplicate work.

See how it works against your estate.

A 30-minute walkthrough against a sandbox of your scale, with one of our governance engineers.

Book a session
Explore the platform

Related