SSCV Calculator

Calculate contextual vulnerability risk scores by combining CVSS base scores with your system's security context

Standard CVSS v3.1 base score

%

20% = standard, other values = marked with ~

Operating System Currency (OS)

Age and security hardening of the operating system

Network Exposure (NE)

Level of network accessibility to the system

Access Controls (AC)

Authentication and authorization mechanisms in place

Endpoint Protection (EP)

Endpoint detection and response capabilities

Data Level (DL)

Sensitivity level of data on the system

Patch Status (PS)

How current the system patches are

Generated SSCV Vector

SSCV:1.0/OS:C/NE:I/AC:F/EP:A/DL:M/PS:C

Contextual Risk Score (CRS)

5.2 MEDIUM
Context Multiplier: 1.125
Exposure Factor: 0.617
Minimum Threshold: 20%
Formula Used: minimum threshold

CVSS vs SSCV Comparison

7.5
5.2

How SSCV Works

  • • Starts with standard CVSS base score
  • • Calculates context multiplier (OS+AC+EP+PS average)
  • • Calculates exposure factor (NE×DL/8)
  • • Applies combined factor with min/max limits
  • • Enforces minimum risk threshold (20%)

Key Benefits

  • • Risk reflects your actual security posture
  • • Standardized methodology across teams
  • • Defensible risk-based decisions
  • • Better resource allocation
  • • Compliance-friendly documentation

Threshold Notation

  • 5.2 = Standard (20% minimum)
  • 5.2~ = Modified threshold
  • • Tilde (~) indicates non-standard calculation
  • • Standard 20% reflects security consensus
  • • Custom thresholds for specialized needs
Ask AI Assistant