Viewing Risk Score Results

The Risk Score of each asset is calculated in every discovery cycle, and the updated results is written into the Risk Score field.

You can view Risk Score results per asset or per vulnerability per asset.

Viewing Results Per Asset

1. After clicking Save and Run, wait for the Risk Score Enforcement Set to finish running. Then, navigate to the Enforcement Set's run history and click the most recent Enforcement Set run (row) to open its drawer.

2. Click the green Successful link. The relevant Assets page opens. It lists the assets matching the query for which the Enforcement Action succeeded to calculate the Risk Score. For each asset, the EC: Result Details field shows

When there are assets for which the Enforcement Action failed to calculate the Risk Score, click the red Failed link to view them. You will be able to see the complete error message for each asset by hovering over the relevant row under the EC: Result Details field.

3. Add the calculated Risk Score column to the table on the Assets page: select Edit Table > Edit Columns, and from the fields that appear, add the Axonius Risk Score field (refer to Changing Columns Display to learn more).

4. The Assets table displays the Axonius Risk Score column.

5. To view assets' Risk Level, add the Axonius Risk Level field from the Edit Table dialog.

Viewing Results Per Vulnerability per Asset

1. Repeat steps 1-2 as explained above.
2. Select an asset from the relevant Assets page.
3. On the Asset's Profile page, from the left navigation panel, expand the Tables section and select Vulnerable Software.
4. The Vulnerable Software table opens, displaying the Axonius Risk Score and Axonius Risk Level fields for each vulnerability detected on the asset.

📘

Note

The results for per Vulnerability per Device Risk Score and Risk Level are also available from the Vulnerability Instances table on the Device's Profile page. This option is only available for Device assets.

Risk Score Breakdown Display

After a Risk Score is calculated for an asset, its Asset Profile page provides a detailed breakdown of the data comprising the Risk Score. This ensures a transparent calculation process, and helps you to quickly detect any changes that need to be made to the Risk Score settings to get more accurate results.

Each row in the Risk Score breakdown table displays the following data:

• The Asset Type from which the calculation field was taken (Device, Vulnerability, etc.)
• The Adapter Connection that fetched this field
• The Field Name
• Calculated Value - The final, numeric value calculated for this field after normalization, standardization or applying fallback values
• The Weight (percentage) of this field in the calculation

Breakdown for Vulnerability Instances

To view Risk Score breakdown for Vulnerability Instances assets:

1. Select an asset from the Vulnerability Instances Assets page.
2. On the Asset's Profile page, from the left navigation panel, expand the Axonius Risk Score section (under the Tables section), and click Asset Risk Score.
3. The breakdown of the latest Risk Score calculated for this Vulnerability Instance is displayed.
4. Additional information and options, demonstrated in the image below:
   • The total Risk Score value of this asset (1)
   • The Risk Score Level of this asset (2)
   • An option to navigate to the Risk Score Settings page (3)
   • An option to export the table to a CSV file (4)

Alternative Fields Notification

In some cases, the calculation mechanism doesn't use the value of the original field defined, but the value of an alternative value defined as a fallback. Learn more about Field-Based Fallback Conditions.

In such case, hovering over the Field Name in the Risk Score Breakdown table shows a note stating that this is an alternative field. This means that this isn't the original field the calculation was supposed to use, but a different field selected based on the fallback conditions defined.

Breakdown for Other Asset Types

The Risk Score breakdown for non-Vulnerability Instances assets depends on which calculation method you used.

• If you calculated the Risk Score per asset, the Asset Profile page will display the Asset Risk Score breakdown,as demonstrated previously with Vulnerability Instances.
• If you calculated the Risk Score per vulnerability per asset, the Asset Profile page will display the Risk Score breakdowns of each vulnerability found on the asset. Follow these steps to view this information:

1. Select an asset from the relevant Assets page.
2. On the Asset's Profile page, from the left navigation panel, expand the Axonius Risk Score section (under Tables), and click Vulnerability Risk Score.
3. The page shows breakdowns of the latest Risk Scores calculated for each vulnerability found on this asset. Each vulnerability has its own breakdown table. Navigate between the different vulnerabilities using the dropdown menu (marked in the image below).
4. Additional information and options - same as the Vulnerability Instances breakdown table.

Assets can have both Asset Risk Score and Vulnerability Risk Score breakdowns. This happens when you define Risk Scores both per asset and per vulnerability per asset.

No Risk Score Available Scenario

If no Risk Score has been defined for the asset yet, no Risk Score breakdown is available on its Asset Profile page. In this case, the Asset Risk Score/Vulnerability Risk Score section is empty, and prompts you to define a Risk Score for this asset.