Risk Score:
Risk score is the primary indicator of the current identity security posture of scanned environments. It is calculated based on the number and severity of detected issues. A risk score of 100 indicates the presence of at least one issue that may lead to a full identity compromise.
Exposure Score:
A metric that represents the overall level of exposure based on discovered misconfigurations, excessive permissions, and risky identity relationships.
Dangerous Path Count:
Dangerous Path Count indicates the number of potential attack paths that could lead to the compromise of privileged identities through misconfigurations or indirect permission relationships.
Shadow Admins:
The number of identities that effectively hold administrative privileges through indirect, inherited, or hard-to-detect permission assignments, posing a significant security risk.
Critical: The number of Issues with Critical severity.
High: The number of Issues with High severity.
Medium: The number of Issues with Medium severity.
Low: The number of Issues with Low severity.
Info: The number of Issues with Info severity.
Risk Breakdown by MITRE ATT&CK Tactics
Risk scores based on MITRE ATT&CK Tactics mapping.