Disclaimer

Research and priority scores

Sentinelt research and the Sentinelt Cyber Priority Score reflect publicly available evidence (NIST NVD, CISA KEV, FIRST EPSS) and, in client engagements, the context provided by the client. A priority score indicates the suggested order of action; it is not a measure of an organization’s overall risk, and it does not assess any specific organization’s exposure unless stated in a client deliverable.

What our work is not

Our research and services are not a vulnerability scan, a penetration test, an audit or certification, or a guarantee of security. We do not install software, request credentials or access client networks. Results are only as complete as the inventory and information we receive.

About the data sources

• A listing in the CISA Known Exploited Vulnerabilities catalog means exploitation has been observed somewhere, not that any particular organization is compromised. Catalog dates are not necessarily the dates of first exploitation.
• EPSS scores are population-level estimates of the probability of exploitation in the next 30 days, published by FIRST; they are not predictions for a specific organization.
• This product uses the NVD API but is not endorsed or certified by the NVD.

AI and data services

Analyses, dashboards and models we deliver are decision-support tools. Their outputs depend on the quality of the data provided and should be reviewed by qualified people before important decisions are made.

No reliance

Content on this website is general information, may change without notice and should not be relied on as professional advice for your specific situation.