--- title: How Does Edgescan Use SSVC Analysis To Prioritize Vulnerability Actions? description: Edgescan incorporates SSVC into AI Insights to provide customers with prioritized vulnerability actions tailored to their environment. This enables teams to move beyond theoretical severity scores and act on what matters most in practice. --- [Skip to content](https://kb.edgescan.com/knowledge/how-does-edgescan-use-ssvc-analysis-to-prioritize-vulnerability-actions#main-content) English Show submenu for translations [![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/) Open main navigation Close main navigation - English Show submenu for translations Search the Edgescan knowledge base - There are no suggestions because the search field is empty. 1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en) 2. [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en) 3. [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights) # How Does Edgescan Use SSVC Analysis To Prioritize Vulnerability Actions? ## Edgescan incorporates SSVC into AI Insights to provide customers with prioritized vulnerability actions tailored to their environment. This enables teams to move beyond theoretical severity scores and act on what matters most in practice. Version Number: v1.0.0 Published Date: 10 Sept 2025 \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ ### What is SSVC? **SSVC (Stakeholder-Specific Vulnerability Categorization)** is a decision-making framework developed by Carnegie Mellon’s SEI to help organizations prioritize vulnerability remediation based on **impact, exploitation status, exposure, and mission context**. Unlike simple scoring systems (e.g., CVSS), SSVC provides a structured way to decide whether to **Act, Track, Attend, or Defer** remediation. Edgescan incorporates SSVC into **AI Insights** to provide customers with prioritized vulnerability actions tailored to their environment. This enables teams to move beyond theoretical severity scores and act on what matters most in practice. ![](https://kb.edgescan.com/hs-fs/hubfs/image-png-Sep-10-2025-01-38-35-1949-PM.png?width=670&height=414&name=image-png-Sep-10-2025-01-38-35-1949-PM.png) ### How it works in Edgescan? 1. **Vulnerability Ingestion** - Edgescan scans and validates vulnerabilities across assets (apps, APIs, networks, cloud, mobile). 2. **Contextual Enrichment** AI Insights enriches findings with external intelligence, including: - Known exploitation in the wild (CISA KEV, EPSS, threat feeds) - Exposure of the asset (internet-facing vs internal) - Business criticality of the asset (based on customer configuration and tagging) 3. **Decision Tree Mapping** Each vulnerability is processed through the SSVC decision model, factoring: - **Exploitation status** (active, proof-of-concept, none) - **Technical impact** (system compromise, data exposure, denial of service) - **Exposure** (reachable externally, restricted, or segmented) - **Mission/business context** (critical system vs low-value asset) 4. **Action Recommendation** Based on the decision model, Edgescan presents a clear recommendation for each vulnerability: - **Act**: Immediate remediation required - **Attend**: Address soon, but not urgent - **Track**: Monitor for changes in exploitation or risk - **Defer**: Low priority, can be safely postponed ### Features & Benefits - **Actionable Prioritization**: Moves beyond generic severity scores to provide tailored remediation guidance. - **Context-Aware**: Factors in both technical severity and business impact. - **Threat-Informed**: Incorporates real-world exploitation data to ensure high-risk vulnerabilities are not missed. - **Resource Efficiency**: Helps teams focus effort on vulnerabilities that present the most significant operational risk. - **Defensible Reporting**: Provides a clear, framework-based rationale for why certain vulnerabilities were fixed first. ### Common Use-Cases - **Vulnerability Management**: Decide which vulnerabilities should be patched immediately versus monitored or deferred. - **Board and Executive Reporting**: Present vulnerability decisions aligned with a recognized framework for transparency. - **Risk Governance**: Demonstrate a defensible, systematic approach to remediation prioritization. - **Operational Efficiency**: Reduce wasted time on low-impact vulnerabilities by focusing on SSVC “Act” and “Attend” items. - **Continuous Risk Assessment**: Reassess vulnerabilities as new exploitation data emerges, updating SSVC recommendations dynamically. - [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content) - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start) - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements) - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context) - [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content) - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts) - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods) - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory) - [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content) - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning) - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting) - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication) - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning) - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings) - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows) - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings) - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations) - [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content) - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts) - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic) - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy) - [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content) - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies) - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas) - [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content) - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation) - [Asset Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-management) - [Vulnerability Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#vulnerability-management) - [License Management](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#license-management) - [Credentials Vault](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#credentials-vault) - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers) - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards) - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights) - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks) - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details) - [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content) - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events) - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing) - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication) - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports) - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms) - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook) - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing) - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar) - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops) - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation) - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations) - [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content) - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup) - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration) - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration) - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings) - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings) - [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content) - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates) - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates) - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates) - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates) - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes) - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019) [![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com) Copyright © 2026 Edgescan. All rights reserved.