Iconsulting for CVE Intelligent Ranking

Iconsulting is Italy's leading consulting firm focused on creating strategic value from data.

The solution provides our customers with an effective vulnerability prioritization tool using a set of Machine Learning and Natural Language Processing (NLP) models.

What we offer

Evolving from the standard CVSS score-based approach using information about published exploits and CVEs actually exploited "in the wild," the solution is able to identify vulnerabilities with a higher likelihood of exploitation, allowing for more effective intervention.

The AI solution integrates Vulnerability Data updated with high frequency (NVD, Exploit DB, FortiGuard, CISA, etc.) and optionally internal data on IT assets in the enterprise that are dynamically updated.

The ML models generate the probability of exploitation of each CVE in the next month, so to be able to prioritize the remediation activities. For greater solution efficiency, the developed models are dynamic and are recalculated and reapplied regularly based on the latest data and exploits.

Compared to the use of a standard approach such as cvss3, CVE IR allows you to increase the efficiency of interventions in an inversely proportional manner to the number of CVEs processed.

Customer Benefits

Decrease the effort spent by IT departments to patch the CVEs with a low probability of being exploited in the wild.

Prioritize and secure critical and most vulnerable assets from the point of view of the real exploitation of CVEs.