As an admin, I want to know on what findings to focus first, so that I don't waste resources on unimportant vulnerabilities.
Reasoning
Potentially, a vulnerability can have a high CVSS of 7 - 10 but is very unlikely to ever be exploited. This can have several reasons and this is tried to be reflected with the EPSS score. There are opensource projects such as 
that promise to combine both to deliver a priority list. Having such a list for every vulnerability encountered in our reports would allow us to triage. The respective priority should be shown in a new panel in the grafana dashboard. something like "Top 10 vulnerabilies to focus on". This has to be filterable by the institution as well and demo data needs to be generated accordingly.
Additionally, another panel can be created that shows a combination of this priority and the amount of vulnerabilities to focus on. For instance, if I have a priority 1 vulnerability that occurs 1 time, it might be better to tackle a priority 2 vulnerability that occues 20 times. we can try to weight this combination to get meaningful insights.
As an admin, I want to know on what findings to focus first, so that I don't waste resources on unimportant vulnerabilities.
Reasoning
Potentially, a vulnerability can have a high CVSS of 7 - 10 but is very unlikely to ever be exploited. This can have several reasons and this is tried to be reflected with the EPSS score. There are opensource projects such as
that promise to combine both to deliver a priority list. Having such a list for every vulnerability encountered in our reports would allow us to triage. The respective priority should be shown in a new panel in the grafana dashboard. something like "Top 10 vulnerabilies to focus on". This has to be filterable by the institution as well and demo data needs to be generated accordingly.
Additionally, another panel can be created that shows a combination of this priority and the amount of vulnerabilities to focus on. For instance, if I have a priority 1 vulnerability that occurs 1 time, it might be better to tackle a priority 2 vulnerability that occues 20 times. we can try to weight this combination to get meaningful insights.