The new Coalition Exploit Scoring System (ESS) provides organizations with vulnerability monitoring and scoring to help them identify which vulnerabilities to patch first, the company announced in a prepared statement.
Tiago Henriques, Coalition's head of security research, commented on Coalition ESS and how it helps IT and security teams detect and prioritize threats:
"Thousands of new vulnerabilities are published monthly, and it’s nearly impossible for IT and security teams to quickly understand and address them all... With Coalition ESS, they have an early source of truth to evaluate which risks to prioritize mitigating before an incident occurs."
How the Coalition Exploit Scoring System Works
Coalition ESS uses artificial intelligence and large language modeling to scan the descriptions used within newly released common vulnerabilities and exposures (CVEs), the company said. The system then compares these descriptions to previously published vulnerabilities to predict the likelihood of exploitability.
From here, Coalition ESS generate two probability scores:
- Exploit Availability Probability shows the likelihood that code for an exploit will be publicly available.
- Exploit Usage Probability highlights the likelihood that threat actors will use an exploit to execute an attack.
Next, security managers and IT professionals can use these scores to determine which vulnerabilities pose the greatest threat to their organizations and respond accordingly, Coalition indicated.
Coalition Updates Its Risk Management Platform
The Coalition ESS launch comes after Coalition in May 2023 released the 2.0 version of its Coalition Control risk management platform.
With Coalition Control 2.0, organizations can access cyber risk monitoring, assessment and quantification tools and receive third-party risk management and artificial intelligence-based support, the company said. The platform offers threat intelligence, vulnerability scoring and asset enumeration capabilities. It also provides a CRQ feature that shows organizations the financial impact of cyber risks so they can purchase the right cyber insurance coverages.
Coalition provides cyber insurance coverage and cybersecurity tools to global organizations. The company offers a partner program for insurance brokers and SaaS security providers.
