Exposure Overview

The Exposure Index displays your company's average exposure risk over the last 30 days. The Exposure Index score is calculated based on numerous factors including unpatched vulnerabilities and the likelihood of attack.

The Exposure Index is calculated using all data received from your business without applying asset visibility scope limits.

For customers with Vulnerability Assessment enabled, the Vulnerabilities section of the Exposure Overview tab displays time-critical security alerts related to detected vulnerabilities that might indicate an ongoing zero-day attack. Trend Micro only issues security alerts for zero-day vulnerabilities with available mitigation options.

Time-critical security alerts also display for high-profile N-day vulnerabilities that Trend Micro recommends you address immediately to bolster your security posture. If Vulnerability Assessment is enabled, you can see a summary of the number of assessed devices in your environment, how many are affected by the vulnerability, and how many endpoints have been the target of exploit attempts. To learn more about a highlighted vulnerability, available attack prevention and detection rules, and recommended mitigation or remediation options, click View details in the security alert.

The primary criteria for issuing a security alert for a time-critical CVE include the potential impact, whether the vulnerability is actively or highly likely to be exploited, and whether exploit code is publicly available.

The following tables outline the widgets available in the three tabs below the Exposure Index.